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APPLE REVEALS 
EYE OF THE TIGER 

Revised Mac OS X expected in 2005 



BY ALAN ZEICHICK 

SAN FRANCISCO — The 
next version of Mac OS X, to be 
called Tiger, will contain more 
than 150 new features, many of 
which are geared toward con- 
sumers. There are also quite a 
few new APIs under the covers, 
as well as a major revision of 
Xcode, the bundled integrated 
development environment that 
debuted in 2003 with Mac OS X 
1.3, also known as Panther. 

That's according to Apple 

Computer Inc. CEO Steve Jobs, 

► continued on page 17 




'The transition to Mac OS X is 
says Apple's Jobs. 
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Or Piffle? 

Developer claims solution to XML 
integration was in SQL all along 



BY EDWARD J. CORREIA 

For all the problems of interop- 
erability solved by XML, it has 
created a whole series of new 
ones for SQL database develop- 
ers, mostly centered around 
attempts to use an engine 
designed for flat relational data 
to process the hierarchical con- 
structs of XML. 

But according to one com- 
pany, the solution may have 
been under the noses of devel- 
opers for more than a decade. 
Claiming that ANSI SQL 92 
itself holds the solution is 
Michael David, founder and 
CTO of Advanced Data Access 
Technologies Inc., which is 
developing a database and data 
modeling methodology that it 
claims can process XML 
natively, is more efficient than 
XQuery-based solutions and 



requires no knowledge of XML. 

"XML is important enough 
that it's pulling the SQL market 
apart," asserted David, express- 
ing concern about the propri- 
etary solutions that have 
emerged from the so-called big 
three database vendors, which 
have largely ignored David's 
ideas. "IBM, Oracle and Micro- 
soft are all very different in 
how they approach XML sup- 
port, and each requires train- 
ing. If you want to combine or 
pull data from two of those 
products, you have to learn 
those two." 

But David, who presented 
his ideas to the W3C while rep- 
resenting NCR Corp., insists 
that SQL not only can process 
XML natively, but can do so 
more efficiently than using 
► continued on page 18 



Microsoft Gives License to Derive 

Windows CE program permits shared source to become IP 



BY EDWARD J. CORREIA 

Bowing to customer demands 
and pressures from competitors 
with more liberal licensing poli- 
cies, Microsoft Corp. in late 
June announced that it would 
allow developers to change, 
market and own derivatives of 
the Windows CE mobile oper- 
ating system, and not return 
changes to the company. The 
change will take effect with 
Windows CE 5.0, due to be 
available by late summer. 

The new Commercial De- 
rivatives Program, an extension 
to the company's Shared Source 
program, will permit develop- 
ers to make changes to the 2.5 
million lines of Windows CE 



SHARING NOT ALIKE 



CE Derivatives Program GNU/Linux GPL 



Royalty starting cost 
All source code open 
Changes become IP 

source code made available 
through the program, to differ- 
entiate or improve their own 
devices and applications and to 
market those changes with no 
obligation to return changes to 
Microsoft. There is no addition- 
al cost involved, but support for 
the changed code becomes the 
responsibility of the developer. 
"This is about the broaden- 
ing of the customer base that is 
using Windows CE," said John 



SPECIAL REPORT 



J3 $0 

_No Yes 

Yes If not linked to GPL code 



Starkweather, senior product 
manager of Microsoft's Mobile 
and Embedded Devices divi- 
sion, who admitted that the 
change was partly intended to 
lure developers away from Lin- 
ux. "We hear customers say that 
Linux is free, so why not go in 
that direction?" 

Todd Brix, a group product 

manager in the Mobile and 

Embedded Devices division, 

► continued on page 25 
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To Linux 




SPOTLIGHT 
ON SUN SOA 

Also open sources 
windowing tools 

BY YVONNE L. LEE 

SAN FRANCISCO — Sun 
Microsystems Inc. gave sketch- 
es of its service-oriented archi- 
tecture flight plans and released 
Java windowing elements to 
open source at its JavaOne con- 
ference at the Moscone Center 
here in late June. 

The company did not, how- 
ever, give further details of 
plans to offer the Solaris oper- 
ating system as open source, 
something president and COO 
Jonathan Schwartz said in early 
June it would do. 

At the conference's opening 
keynote, Schwartz announced 
that Sun would offer the code 
to its Project Looking Glass 
desktop windowing system and 
the Java 3D technology on 
java.net. Separately, the com- 
pany announced it would 
► continued on page 22 
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ILOG Readies Free Version of Its Rules Engine 

Claims new Eclipse plug-in allows logic to be updated without code tinkering 



BY JENNIFER DEJONG 

Online retailers constantly 
change the rules that govern 
their e-commerce applications. 
But offering short-term promo- 
tions, such as giving platinum- 
level customers a 10 percent 
discount at checkout, causes 
headaches for developers, who 
have to go in and alter the 
application's source code 
accordingly. 

To ease that process, ILOG 
Inc. made available last month 
a free, scaled-down version of 
its business rules technology. 
An Eclipse plug-in, Business 
Rule Studio Developer Edition 
is based on the company's 
JRules software, launched in 
1997, said ILOG's director of 
industry marketing, Henry 
Bowers. 

Changes such as discount 
offers appear trivial, but the 
tasks associated with them are 
time-consuming to complete, 
said Bowers. The developer 
has to crack open the code, 
change one or more files, 
repackage them for deploy- 
ment, and test the updated 
application. "Did I break any- 
thing? Is the change I made 



effective?" said Bowers. And 
the next day, the discount 
might jump from 10 percent to 
15 percent, he said. 

BR Studio, which requires 
Eclipse 2.1 or IBM Corp.'s 
WebSphere Application Devel- 
oper 5.1, simplifies that process, 
according to Bowers. It lets de- 
velopers write, edit and debug 
business rules that are executed 
by a rules engine embedded in 
the Java application. By separat- 
ing rules from the source code, 
developers can update them 
quickly, without having to rede- 
velop the application, he said. 

Although BR Studio is free, 
its real purpose is to help sell 
JRules, which costs about 
US$20,000 per server proces- 
sor, Bowers acknowledged. BR 
Studio includes the rules 
engine, but companies that use 
the engine to conduct actual 
business must purchase JRules, 
said Bowers. 

Unlike BR Studio, JRules 
includes a repository to store 
commonly used rules. It also 
lets business users, not just 
developers, write the rules. For 
many companies, off-loading 
that function from the develop- 



er to the business user requires 
both parties to assume a new 
mindset, noted Bowers. But 
doing so can free developers to 
concentrate on more demand- 
ing programming tasks, he said. 
The current version of 
JRules, 4.6, is based on its own 
proprietary IDE, but a future 
version will incorporate the 



Eclipse IDE, said Bowers. It 
competes with rules engines 
such as Computer Associates 
International Inc.'s Aion, Fair 
Isaac Corp.'s Blaze Advisor and 
PegaSystems Inc.'s PegaRules, 
as well as with the open-source 
rules engine, Drools. 

Not every rule — only those 
that are most volatile — should 



be pulled out of source code 
and managed in a rules engine, 
noted Bowers. For instance, 
said Bowers, a mortgage com- 
pany that deals in the home 
market does not need to alter a 
rule that states: We don't buy 
commercial mortgages. "If they 
did, they'd be entering a whole 
new business," he said. I 



Macrovision to Acquire InstallShield 



BY DAVID RUBINSTEIN 

Claiming its customers have 
been clamoring for the ability 
to handle licensing issues 
during the install process, 
Macrovision Corp. last month 
announced it will acquire 
InstallShield Software Corp. 
for US$76 million in cash, with 
another $20 million to be paid 
contingent upon post-acquisi- 
tion performance against rev- 
enue targets. The deal is 
expected to close this month 
or next. 

The move should help 
Macrovision expand its place in 
what it's calling the software 
value management chain, 
according to Daniel Greenberg, 



Macrovision's vice president of 
marketing. Right away, the deal 
provides Macrovision with a 
conduit "to 500 million desk- 
tops worldwide," he said, noting 
the number of computers on 
which InstallShield is used. 
"They're the de facto standard 
of installers, and we're the de 
facto standard of software 
licensing" with the FLEXnet 
Publisher licensing enforce- 
ment tool, he said. "After the 
code's done, there are a whole 
series of processes that are part 
of the value chain — pricing, 
packaging, deployment." 

Greenberg said there is a big 
overlap between software setup 
authoring, which is done with 



installer tools, and licensing. 
ISVs now can use a single solu- 
tion for packaging and pricing 
software, he said. Meanwhile, 
on an enterprise level, "groups 
want to control the apps they 
deploy out to their users," 
Greenberg noted. "IT adminis- 
trators do the same kind of 
processes as setup authoring, as 
well as usage monitoring, figur- 
ing out what to renew." 

The merger of the two prod- 
uct lines also will leverage 
InstallShield's update service, 
which now will allow companies 
sending software updates to 
know what the end user is enti- 
tled to under the license, all in 
one system, Greenberg said. I 



Many Ways to Skin .NET and Java Integration 

Vendors are taking three basic approaches to bridging the two technologies 



BY YVONNE L. LEE 

It used to be that .NET and 
J2EE were Web services 
islands, connected only by 
communication between fin- 
ished applications, but now 
vendors have begun shipping 
tools that bridge the two archi- 
tectures. 

Using the various kinds of 
tools now available, organiza- 
tions can build individual 
applications that take advan- 
tage of aspects of both .NET 
andJ2EE. 

Companies have taken 
three basic approaches to try- 
ing to get the two technologies 
to communicate. They involve 
translation, sharing code, 
and traditional integration 
middleware. 

TRANSLATION, PLEASE 

Bridging software such as 
CodeMesh Inc.'s JuggerNET, 
Intrinsyc Software Internation- 
al Inc.'s Ja.Net, and JNBridge 



LLC's JNBridge Pro use the 
translation approach. 

This kind of software is 
faster than using Web services 
for integration because Web 

.NET Sidi- 



services must transmit XML 
files, which are typically larger 
than executable files, and 
they require the extra step of 
translating XML on both ends, 



said Wayne Citrin, CTO of 
JNBridge. 

"The conversion takes time, 
plus the XML is bigger than a 
binary-encoded message," he 
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Bridge products such as JNBridge's JNBridge Pro use proxies that translate specific calls in the original architecture. 



said. "If the message is bigger, 
the more time it takes across 
the wire." 

The software is most often 
used in situations where an 
organization needs to connect 
.NET clients with Java servlets, 
although JNBridge and Ja.NET 
work bidirectionally They work 
by having a series of .NET 
proxy classes that stand in for 
Java classes, and include the 
software vendors' proprietary 
software for managing the com- 
munication between the two 
systems. JNBridge Pro and 
Ja.NET include Java proxies for 
mimicking .NET instructions. 

Borland Software Corp.'s 
Janeva has a twist on the trans- 
lation theme. 

"[Bridging technology is] like 
having somebody translate," 
said Vince Taisipic, senior prod- 
uct manager at Borland. "Janeva 
goes in and makes .NET appli- 
cations trilingual, if you will." 

► continued on page 22 
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NEW PRODUCTS, 



Czech Republic-based Kentico Software s.r.o. has started a beta pro- 
gram for Kentico CMS, a Web-based content management system for 
ASP.NET. The finished version will cost f 
US$499 per Web site . . . Quinn-Curtis ■ #■ KENTICO 
Inc. has introduced Real Time Graphics 

Tools, a .NET component toolkit for real-time displays such as scrolling 
graphics, bar indicators, meters, clocks and digital panels. The soft- 
ware, for C# and Visual Basic, has a US$100 per-seat development 
cost and a runtime license of $100 per application or Web site . . . Neos 
LLC is offering a new utility, Vgo, which can create Java 
code for new Web applications by exacting logic from data 
sources and previously existing apps. The company says 
that up to 75 percent of the code is automatically generated . . . Nov- 
ell Inc. has released Mono 1.0, its open-source implementation for 
Linux of Microsoft's .NET 1.1 development framework. The tools, which 
include a C# compiler, .NET compatible runtime and APIs for Linux 
and Windows, reportedly permit developers to build applications that 
can run on Windows, Linux, Mac OS X and several versions of Unix. 
Available now, the runtime and tools can be downloaded at www 
.mono-project.com/downloads . . . The Apache Software Foundation 
has released Apache Object/Relational Bridge 1.0, a mapping tool 
that allows transparent persistence for Java objects against a rela- 
tional database . . . AskSam Systems Inc. is offering a new AskSam 
SDK for its free-form database engine. The SDK, which can be licensed 
for US$499 per developer, lets Windows and .NET applications access 
the database's full-text search and free-form database capabilities in 
custom apps . . . WorldSync Inc. has shipped SyncDek 
Developer Kit for Mac OS X, a US$749 tool for adding 
synchronization capabilities to FileMaker databases 
for mobile users or remote sites. The developer kit is programmed in 
Java and works over the Internet. A Windows version is in beta. 
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Parasoft Corp.'s NET-based unit testing tool TEST 1.6 now can auto- 
mate the creation and execution of NUnit tests. The software costs 
US$900 . . . DataDirect Technologies Inc. has updated its 32-bit Con- 
nect for ODBC and Connect64 for ODBC drivers. Version 5 is 
designed to take advantage of new features in Oracle 10g, including 
new data types and Oracle's grid. The driver suite also has improve- 
ments for DB2, Progress, SQL Server and Sybase databases. In addi- 
tion, the company updated its Connect for JDBC driver; version 3.4 
focuses on Oracle 10g features . . . Corda Technologies Inc. is now 
offering a free lightweight version of Corda Builder, its tool for creat- 
ing interactive charts, graphs and online maps, and which translates 
HTML into PDF . . . The Finnish firm MetaCase Consulting is offering 

ma Linux version of its MetaEdit+ 4.0 
modeling and code-generation environ- 
ment. Versions for HP-UX, Solaris and Windows were already available 
. . . Version 3.5 of Spices.NET Studio, a suite for obfuscating .NET 
applications from 9Rays.NET, can reduce the size of metadata and 
manage the process of verifying assemblies. The US$392 suite 
includes a decompiler, a metadata browser, a code modeler and a GUI 
tool for managing the obfuscation process . . . MoleStudio.com has 
updated its MoleBox Pro runtime executable packer for Windows. Ver- 
sion 2.2 can pack executables, DLLs, data and resource files into mul- 
tiple packages; previous releases encrypted the files and then com- 
pressed them into a single package. The software costs US$99 per 
seat, or $299 for a site license . . . ANTs Data Server, a database from 
ANTs Software Inc., has added six new operating systems to its run list: 
Red Hat Enterprise Linux 3 and Fedora Core 2, Solaris 10, SUSE Linux, 
and Windows XP and 2003 . . . Digital Airways is offering a new ver- 
sion of its Kaleido MMI (Man Machine Interface) user interface soft- 
ware for mobile phones. The first release was Java only; the new ver- 
sion can work with C/C++ apps . . . Version 7.2 of MKS Toolkit, a set 
of Unix-like utilities for Windows from MKS Inc., now supports gcc com- 
pilers, 64-bit Windows and SSH-based secure visual file manipulations 
via drag-and-drop. The US$359 software also works with Unix real- 
time middleware, including message 



SecureObjects Aims 
To Plug Holes in Apps 



BY YVONNE L. LEE 

SPI Dynamics Inc., which 
makes the Weblnspect series 
of applications that add the 
ability to find security holes in 
applications, will ship a series 
of .NET components later this 
year designed to remedy such 
problems. 

A similar set of components 
will be available shortly after for 
ASP applications, and by the end 
of the year for Java. 

The components, called 
SecureObjects, can be dropped 
into applications from within 



Microsoft's Visual Studio .NET 
development environment. 

The software is primarily 
designed to validate data on a 
Web form. "Sixty to 70 percent 
of vulnerabilities are caused 
because the developer does not 
validate his input," said founder 
and CTO Caleb Sima. Many 
problems, including memory 
overflows, could be solved if 
fields were verified before the 
data is sent to the server, Sima 
claimed. 

In addition to providing 
drop-in objects for verifying 



fields such as e-mail addresses 
and U.S. phone numbers and 
ZIP codes, the software in- 
cludes examples for creating 
customizable field verifiers. 

It also has a wizard that 
detects any variable in a form 
that has not been wrapped in a 
validation-testing object. After 
receiving the results of the test, 
developers can go back and cre- 
ate verification routines for the 
remaining form fields. 

Pricing has not been set but 
will be per seat, said president 
Bruce Cohen. I 
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SPI Dynamics' SecureObjects can be placed into applications directly from within Visual Studio .NET. 



Unit Testing Added to OptimalJ 



BY JENNIFER DEJONG 

Helping developers detect 
errors earlier, Compuware 
Corp. late last month added unit 
testing tools to its model-driven 
development environment. 

Unlike the previous version, 
3.1, OptimalJ 3.2 automatically 
creates unit tests from hand- 
written code, said Mike Sawicki, 
OptimalJ product manager at 
the Detroit-based company. 

OptimalJ generates J2EE 
code from visual models based 
on the Unified Modeling Lan- 
guage (UML). But developers 
typically write 10 percent to 35 
percent of an application by 
hand. The model-driven code 
has already been extensively 
tested, but handwritten code is 



prone to error, Sawicki said. 

Unit testing is designed to 
catch errors early. But many 
developers tend to avoid the task 
of writing scripts that test, for 
example, whether a value falls 
within a particular range and 
whether that range is valid, said 
Sawicki. "The only task they hate 
more is documentation." 

OptimalJ 3.1 was designed to 
plug into Sun Microsystems 
Inc.'s NetBeans, but all three 
editions of 3.2 — developer, pro- 
fessional and architecture — also 
support the Eclipse open-source 
framework. In addition, the 
developer edition, which costs 
US$1,900 per named user, 
works with IntelliJ IDEA from 
JetBrains Inc. Licenses start at 



$5,000 for the professional edi- 
tion and $10,000 for the archi- 
tecture edition. The developer 
edition provides code-editing 
features. The professional edi- 
tion adds UML tools, and the 
architecture edition adds pat- 
tern creation capabilities. 

Also new to 3.2, available the 
middle of this month, is support 
for all nine UML diagrams, 
including Sequence and State. 
In addition, the Activity dia- 
gram automatically generates 
code. In the previous version, 
developers had to hand-code 
that diagram, said Sawicki. For 
developers working on a team, 
3.2 includes a model-merge 
tool, which helps coordinate 
the group's efforts. I 
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Logiscope Gives View Into Code Quality 

Telelogic's upgraded analyzer has better performance, batch processing 



BY DAVID RUBINSTEIN 

Developing what it claims is a 
smarter way of analyzing code, 
Telelogic AB this week 
announced version 6.1 of its 



Tau/Logiscope testing tool that 
the company says is now fast 
enough for developers to use to 
check their own code during 
the build process. 



"If you've analyzed tens of 
thousands of lines of code and 
changed it in a few places, Logi- 
scope will only check the areas 
where the changes were made, 



and that speeds the product up 
by 95 percent," said Andy Gurd, 
director of product launches at 
Telelogic. He added that the 
tool now has the ability to run 
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checks on code in batch mode. 

Logiscope consists of three 
components: Rule Checker, 
Audit and Test Checker. 

The Rule Checker is used 
to compare the code against 
an organization's development 
best practices, and can identi- 
fy portions of code where 
those rules have been broken. 
Gurd said. The analyzer can 
work on C, C ++, Ada and Java 
code, he added. 

The Audit function is used by 
organizations to ensure they've 
produced good-quality code, 
Gurd explained. "This is where 
quality assessment comes in," he 
said. "How complex is the code? 
Will it be easy to test and main- 
tain? Audit produces metrics for 
making these kinds of assess- 
ments of code modules." 

The Test Checker instru- 
ments the source code, so that 
when test scripts are run against 
the code, the software can 
ensure there is complete code 
coverage, Gurd said. 

Although Telelogic is per- 
haps better known for its mod- 
eling and requirements man- 
agement tools, Gurd said 
Logiscope fits in organizations 
that haven't reached a high lev- 
el of adoption of modeling 
technology. "It doesn't make 
sense to use Logiscope if you're 
generating code" with automat- 
ic modelers, he said, noting that 
Logiscope is best used where 
organizations are developing or 
maintaining code by hand. 

Logiscope also has been 
shown to be effective in organi- 
zations that do modeling and 
architectural plans but then out- 
source the development, so that 
the incoming code can be thor- 
oughly analyzed and checked, 
claimed Per Blysa, the vice pres- 
ident of product management 
for the Tau line. He said that in 
the automotive industry, there is 
a high degree of modeling, but 
at some point, the manufactur- 
ers make a decision to build or 
buy code. "They create their 
own specifications but subcon- 
tract out software, and this 
allows them to test the quality of 
that software," Blysa said. 

Gurd also said that compa- 
nies have found the tool to be a 
good fit for measuring the quali- 
ty of their code against ISO 9000 
for quality management and the 
ISO/IEC 9126 standard for eval- 
uating software quality. I 
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Micro Focus Sees Mainframes From Both Sides Now 

Mainframe Express generates code to link COBOL apps to .NET, J2EE 



BY EDWARD J. CORREIA 

If the idea is to access a main- 
frame's applications and trans- 
actions from modern languages 



and systems, it's not enough 
simply to generate mainframe 
source code. 

That's the position of 



COBOL solutions developer 
Micro Focus International 
Ltd., which in June released 
Mainframe Express Enterprise 



Edition, a version of its 
COBOL tool that it claims not 
only generates applications for 
IBM mainframes, but also 



O Ywitr besf source for sojiuwe 



GUARANTEED BEST PRICES" 

■ ■ m 

■j UAL L5 Wl huifv pin iivJ^taii 

■ :11a asa" frmiqfc IJ. Jl taM - I 

. .hJ'abi uau ■ .«£.■#.: :j >j # i 

*1 OJJIJEIl Kill 

c* ik ftr* & u # * ink tttt ft ttwiti tt *tf w&ta i 3 





Ulultt 



LEABTOOLS 

■DflcunKfll- Imsfins i.J4 
■T LUff FiJiiulifiLj. 

iij i-i>|iirm7Fln'rtr¥^B^y 8 ni*rt» 

■ -i..i. i-.Ui.kfjIta I 11 -1 -i- :. *■ 
=rr?fHI pm !■[ ■■ aJlliii ■ yjm«M 
h*fr feari ffliBp-| irtl<n , i-*iAri fcf rta in'iiJi 11 
■■""- uxiil Vti ptMn 1 1 LLMun LuiU 

■ 'lihcinl iVK Iritnrivj — <esi alh anwi 
• ii -* H|Impi W 

« O ifUi^flUI lad " All 11 Jm y m i 
UUPIJMI 



nw^ai 



-. !« 



r 



z 



ftprfir- 



T«h WlK Srrao/lr tJjO 

J_ K.Lf.juL 

1ni& " hn twdiaM. M4 prm ^tp.^-fr-- 

EalfdJ >L^JI 0tm LIHf n. VHt LJU]UJH 
■nq-uil t kin — alft i«f**j.\ j-l^I.it a 
"i^TCftT: rf nnhpijfinx, pq 11 jtiimtl* J 
ill. jiiUbbl Itrt^fiillU emJ |uji'L*i lb** 
El nn aint- Irvnn ell hi- utrsk alh- 

%ii l 1 ii±J ndc crh ctb qiift iliir-'^tf 
1 j:l-_ Ip HI Mjfprfar i/£i HikjiV |]n_j 4ujJ 
-- -, -4 !Mi m* te.nl iiJpVMI'ii-icS 
1 IT" 1 V-Jl lau-i r<ildJ PT 'iLno-lii. liJ " 
- It •■ em r- i-> jJ. nHi iraL' -.lx^I pH i 
"*M itmii Jlih aaMJWl hlilal 

Ik 




■ire* Pi 



ll. 



hjra^M 

Mi ugHrW lanfimn- ai| p^nfcttH. 
r-lra Hfi cm irvian-v liifekn nzifri nr- 
fniiLiiiiJiuprtiv'liwnh HPiMkii_d 
ikn-kfEfi .be l ,in JLn Li j p li uiet i J 

B^- -- « Nihul rf'&lJriWta.itfpmvrir-'fBal 

■ J^" L | -*- -rc J.iM—L.131 =. ± *r. IUC* AiXOiku 

'KiBBi'iVh Irtkiki kPi-k.^ I n\ 
PkBTrcl Ml nJ C 1 ► 4x*ar 
_* -,■«■ 'I'l 1 - 'i".t^". -.Hm Tl* en k *i; 

■* ■* -- ' - ^ iii-Jbi t^i Uqpt ih ' nl nidi irar 

■PI rj ] ],| 'iuiLiJiv wrtii — Lk^-Uc SijIeL I Jik« 

^ ■j'^K'! : 1 iilii'ii l Mi l Lir 

■|--rjcr..h .,m Irs ,;n 



ML--.- 
■P. 



»5«"jf 



l 8S0. 



/t 



PkTBdl#l 

Sr>T4S!IE 



TeeChfirt fw HET C«nd 

b/ SlftTTO fa^pKITT 

MlPfc iiu^ndC" Vt dura if. niu i hi urtl 

ntiiix I^J 1 P ■diiLiL'ki 1 _. -I k F.:i ikoLkqi. 

"■ PI n Pi - ||: H : :|'',r JTp fc— J ||Pi Mr^n 

a.i •> 1 .. i.J:iiiii. 1 «ETljLiiiJ v i..iJ-Mi^ 
. 1 Kafrmrta IIJJlh i raaht. Vlilri. 

«?un una*. '^Jlt-f da MiiL|4e0sm n^g. 

jiiii T' aal Ifcilfal r 1 ■! i I i 1"fi I ■ Ji Ttfai 

Trntt* prtl niBTJffc^pJ liBtwt^ftiafltJEi 
A m. I j Ji il MV 1' .U.*. J 

BOflB-ittnA 




difcurEh Mill wnb Sftdar 

' llflU^ii-iK - '|J?,1~ M'^IWBTrmUltt^l. 
>■ KilUn-fWi I ilUWI LalFlfd Jii^IpAiI Jc 

* lH0l«^ilc* II JLVl. Ill Vt UiH4«hii 
■ hn M| ■ ■- IbiL ji! iiL^n lunnlii Ji-i lit* 
'1 j-.'ziF L-k-i ni m"VJ. in: ^ Jis^rw Mh 

*n-Si^it 1iUfiiii« , VTLi'-'-p jr 

DfiBiaaJ ri^Hia Mil* wM Ubt 
gjj-jW lichm^AMi^birfti 

*■"***■ Tli iiipi Mpf Ti£ flUiin a *-.nn mi 

«•"* nUimitar ufliri.*t-iaMp 



ilwuir 



TIC T«l CbnlMl ll.Q 
WbtJ Piutiskip (feWMtfrrli 

P. Irni'iiN^b ■i'':V h .ffrf*T Hlld il 

h**il il uffJ pnffi^itpf^n II Prl 

;,dF[-d., "|^n| 

■■ SCT1flrfi4n!.cnp>j| IlH YT1 ^TT nJ Tjp 

■ un.x h a eh iiiiv, ^r^^i 1 nui. t^ 

tfBjShrtnV-Hii.l" UmLIMI 
- I !■> . -ji*l apl-iiri rtn-ui\ U\ parr. !...* 
■airitaLi ihirn- 

■ 
^m\k% ■uii'uJ Jtk iulIiL' ujkrpjl- 

■ Ij jJi-fci- n hlLn iii dLnj han 




T71D3IM 



PR 1nckn 1h f S.I 

vf jS'llttWt ■T-HipBTh' 

¥?"IJ*I ! ittilJfc Pffefjlll 1 fc»f I Nfl 

■IsJjl J t iHiB|l klLllBL^ I "jMtit il.T 

■■JPITP^I '■^tEp-^fm+TT.frriitFiL 

jL'Zp»Lia«mLiarr|>fTiiBjja jirfiiri 

.nl mul 1 ■ ■ l1_d ■ ■ 1 kiijpiii 1II1 

ft irwtm Vbllnnl Unc*P*di iFpt 

ftJuilTrrn tj.iminiiJi . .. 
.Mi-ill.!!' 





MIT.** 

UHpJtMilN.'MiTAlLi 



Mullif Etl M 

71a aru.ll It I ^rrl -pyunr 
ibbt Fii|rrm;a,BnEi ink m iih 

MHi.B^hrl^irrr.U 
ra I- s M Tlfl Hi IrcuW 

":i>- uru-Li.oi 

■1 I'Mkji h J jiIIJU.*. 

* SLit. on :iJTMphi pan 

* 4fW Ln| vrvaf 




■ Tir'p e^J.4 



■!•] DS5Y 



Paradise Picks 




Dcrlrach 5.4 
NwwU DiFaife mi 

frCfCd Ti 1LP.L1D 

b f UtArzrW 

ThTIbM. Ilk. ITBltUulcBilrJLiJ 1^1 
jil|i+«l \rt Li?/ HJjtni I'-ii^n 
faaWj| HlBBj ■ BBJ iiiiaii ■ 
- . ■ . ■ I;------ 

;fc-i1i»f l « r. i>iii.H«jrMpiKrfy*l 
ti rtfi bt in j Front j rrrr-atn 

E=i-kl**Ulir Lllk-LIIMJ \Mk.jfiU»l 

vilb^nrEnrBBLOiPte 
"^ j: mtiIj.il uJ InJI d 
jkJudiriH hliinj. aJniinbn 
Til ir*p?|i" nfkm |r# rof^ 
lift AIJlII uj ILbCUlIiMMJc 



n/lnhna 



PairiliP-. 
IMUfl 



*48I^ 




IP-Warkd fl*d Car 3 r-r 

iuhicriplionv 

kf/wmHwmw 
rnLB^i , iBjijwi»* ,u ^^pi4ii* 

i_lii ULiir-L^JlL.<lEliJLLJ|f: 
tn\ rH Li ■ Elm i i rrnanfl I ¥ bbT| 

mfvlipjDKt |m*d ML ibJ :-:-n 
mLUXK WTIE WlSV&bi. TprJ'-i 
liflft*** -t-mll Ifll ■Vi.lppili r^l' 

, u]j.-r-jLi -iHirl^Mp^cnd 

p\f-t P t'tiJt* !hJHl H-tfOfTiiri 
iIip l i. -.^-ri |i-: b^-Ti r-nn r#- 

OPVBBBJI EL1A13L hT UJI*LtK 

HThP-'^" UFlTiH 3yp>k*iki'-nj 

Lit HhvT^JVJI tnt 



PaiarJn r 



$ 



1264/ 



800-445-7899 - program m ersparaclise.com 



niBI IBl I BlBBI 



builds the components neces- 
sary for connecting those apps 
to Web services or to .NET or 
J2EE applications. 

Ian Archbell, vice presi- 
dent of product management 
at Micro Focus, said the tool 
now makes it possible for 
modern applications to gain 
access not only to mainframe 
applications but also to 
their transactional capabili- 
ties. "About 70 percent of the 
world's transactions are still 
happening on mainframes," 
he said. "If you've got CICS 
or IMS transactions, you can 
tap into those very easily and 
unlock their value in new 
applications." 

Among the new features is a 
Component Generator, which 
Archbell said generates all the 
necessary code for linking 
COBOL apps once deployed 
on the mainframe to desktop 
or Web apps. "We create 
everything you need in terms 
of JavaBeans, Enterprise Java- 
Beans, a .NET stub, or an 
XML interface or Web service 
to rapidly build an interface 
from a legacy application to 
.NET, for example." 

The tool starts at US$7,500 
per developer seat. 

NOT JUST CODE GENERATION 

Mainframe Express is unlike 
competitive solutions, which 
Archbell said simply generate 
code. "We're not just generat- 
ing code to put on the 
mainframe. We provide a full 
mainframe environment on 
Windows that incorporates all 
the things you need to create, 
test and maintain mainframe 
applications on the PC." 

But emulating all the func- 
tionality of a company's main- 
frame requires moving all of 
that mainframe's applications 
to the PC, a process that Arch- 
bell admitted was complicat- 
ed. "There were problems get- 
ting that up and running. Now 
that process is mostly automat- 
ed and much easier to admin- 
ister," he said. 

Available now for Windows- 
based development hosts, 
Mainframe Express Enterprise 
Edition generates COBOL 
applications for CICS or 
IMS systems on any IBM 
mainframe running OS/390 or 
z/OS. I 
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Ounce Offers Vulnerability Prevention 

New Prexis code analyzer understands the context of an application is code 



BY DAVID RUBINSTEIN 

An ounce of prevention... we 11, 
you know the saying. 

Another software vendor has 
entered the burgeoning vul- 
nerability testing market, as 
Waltham, Mass. -based Ounce 
Labs Inc. has released version 
2.0 of Prexis, the company's code 
analyzer and reporting solution. 

While pointing out the differ- 
ences between Prexis and solu- 
tions from AtStake Inc. (binary 
analysis), Reasoning Inc. (testing 
services) and Sanctum Inc. (a 
runtime solution), Ounce Labs 
CEO Jack Danahy acknowl- 
edged his company's approach 
and positioning is similar to that 
of Ontario-based start-up Kloc- 
work Inc. — you need to under- 
stand the structure of the soft- 
ware within your organization. 

"We call it portfolio analy- 
sis," Danahy said. "We provide 
the ability to analyze code line 
by line. Then [company execu- 
tives] can decide where people 
should spend their time solving 
problems." 

Danahy said contextual 
analysis of code is critical, and 
Prexis uses what Danahy said 
looks like a compiler to create a 
map of variables and flow 
through a program. This, along 
with the complete parsing of 
code, gives conclusive informa- 
tion about the application and 
any potential security breaches. 
"We're not simply looking for 
triggers" to problems, he added. 

As an example, Danahy said 
that certain calls written in C 
or C + + create vulnerabilities 
when used incorrectly. A planar 
analysis of this code would look 
for certain keywords and behav- 
iors to generate warnings. But 
some people like to use these 
calls because they're fast, and if 
used properly, do not create vul- 
nerabilities. So instead of gener- 
ating "false positive" alerts about 
the use of these calls, a full con- 
textual analysis of the code 
would leave it alone, he said. 

"We mainly want to generate 
metrics that are useful," he 
added. "Giving 100,000 alerts 
in 300,000 lines of code isn't 
useful." 

SECURE THE INTERFACES 

But Danahy also said there is 
much more value in Prexis than 
making sure new applications 
being written are secure. Prex- 
is, he said, can do a full analysis 



and point out where developers 
should write secure interfaces 
to communicate with the old 
interfaces that aren't secure — 
and do it without affecting the 



application. "Most applications 
critical to the business function 
already have been written," he 
said. "It's critical to help them 
with the legacy problem. We 



give them enough information 
to make intelligent decisions 
about what to fix." 

Prexis 2.0, which includes 20 
seats of the developer Prexis 



Pro tool, the reporting engine, 
language module and the 
Prexis Insight management 
dashboard, sells for about 
US$100,000, Danahy said. 
Ounce Labs was founded in 
August 2002, although some of 
the developers of the product 
have been together since the 
1980s, Danahy said. I 
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MORE UPGRADES 



_L 



< continued from page 6 

queues, memory locks and barriers . . . Wind River Systems Inc. has 
released Workbench 2.0, a upgrade of its IDE for VxWorks, Linux and 
proprietary operating systems. Previously called Wind Power, the IDE 
is now based on the Eclipse IDE framework . . . Blast Radius Inc. has 
updated its XMetaL XML content-authoring tool. Version 4.5 can gen- 
erate style sheets and behaviors automatically from DTDs or schemas, 
Xand offers application-level customizations for 
'— developers. It also has new features for editing 
style sheets and tables . . . Volume 2 of Net Ad- 
vantage 2004, a component suite from Infragistics Inc., ships with 
new code designers and style presets for its ASP.NET elements, 
MSDN-style help through its new HelpCenter tool, and new compo- 
nents for working with dynamically changing layouts and data grids 
. . . Rogue Wave, a division of Quovadx Inc., has updated its LEIF Web 
services framework for C++. Version 2.1 includes a new embedded 
server for deploying a service listener in existing apps without using a 
container, and also has a new message-handling API. It also allows 
recursive arrays so that identical SOAP array names can be declared 
in different namespaces . . . FileMaker Inc. has released version 7.0 of 
its FileMaker Mobile database, which runs on Palm OS and Pocket PC 
devices. The update can sync multiple mobile databases 
from the same desktop database, and also has greater 
support for presync and post-sync scripts . . . TimesTen 
Inc. has updated its Real-Time Enterprise software. 
Version 5.1 now offers role-based security, real-time 
data recovery and integration with TIBCO Rendezvous messaging sys- 
tems. The company also has added three new products that work with 
RTE, for business activity monitoring, customer interaction manage- 
ment and operations control . . . VMware Inc. has added what it calls 
"experimental support" for 64-bit computing using the AMD64 and 
Intel EM64T extensions to its VMware GSX Server and VMware 
Workstation products. The products will work with Red Hat Enterprise 
Linux 3, SUSE Linux Enterprise Server 8, and the beta version of Win- 
dows Server 2003 . . . Version 2.5 of Help Desk, a hosted end-user 
support application from Elementool Inc., now can integrate with the 
company's Bug Tracker application. A subscription to Help Desk costs 
US$79.99 per month . . . Version 1.2 of the EKO Compiler Suite, which 
includes both C/C++ and Fortran compilers, adds supports for SUSE 
Linux 9.1 and Red Hat Fedora Core 2, and according to PathScale Inc., 
is significantly faster for both 32-bit and 64-bit x86 applications. The 
C/C++ compiler costs US$595, Fortran is $1,095, and the full suite is 
$1,495 . . . Version 7.0 of American Arium's SourcePoint debugger for 
x86 processors now supports Intel's Platform Innovation Framework 
for the Extensible Firmware Interface. The EFI framework provides a 
phased architecture for initializing a target system and its services 
. . . McObject LLC is doing final beta testing on eXtremeDB 2.3, its 
in-memory embedded database system. The principal new feature in 
this release is an option to write database changes into a transaction 
log on persistent media. 




, PEOPLE , 



Michael Laginski has been promoted to CEO of Klocwork Inc. Lagin- 
ski, who had been the company's SVP of sales and marketing, replaces 
Eric Goodwin, who is retiring . . . Jon Temple is the new president and 
COO of integration tools maker Above All Software Inc. Temple had 
been SVP and general manager for the Americas for Business Objects, 
and takes his titles from founder Roger Sippl, who remains CEO 
IflH^L . . . palmOne Inc. has promoted Ed Colligan to presi- 
dent. Formerly SVP and general manager of the compa- 
ny's wireless business unit, Colligan had been president 
and CEO of Handspring Inc., which Palm purchased in 
2003 . . . New managers and promotions at Pervasive 
Software Inc.: Curtis Hill comes on board as VP of engi- 
neering; he previously held the same title at BMC. Sandy West is the 
new VP of marketing; she had been Motorola's corporate marketing 
VP. Meanwhile, Mike Hoskins has been promoted to CEO, and Suaat 
Sait to VP and general manager of products and markets. I 



COLLIGAN 



Integrations Dominate 
Landscape at Serena 

Tie former Merant products to ALM platform 



BY DAVID RUBINSTEIN 

Even as it announced the 
acquisition of the requirements 
management package RTM 
from Integrated Chipware Inc. 
last month, application life- 
cycle management (ALM) solu- 
tions vendor Serena Software 
Inc. laid out a product road 
map detailing the integration of 
its products with those it picked 
up when it purchased Merant 
Inc. in April. 

Seven products will be re- 
leased between now and the 
end of the year, according to 
James Rogers, vice president of 
product management, with new 
functionality and with tight 
integrations among them. 

While readying an August 
release of the TeamTrack col- 
laboration platform, Rogers 
said the company will continue 
to make Merant s Tracker, now 
at version 8, available to exist- 
ing customers for add-on 
licenses, but will release migra- 
tion utilities to get those cus- 
tomers to move to TeamTrack. 
"It's virtually the same prod- 
uct," Rogers said, explaining 
that the roots of each can be 
traced to the same engineers. 

The August release of 
TeamTrack version 10 will fea- 
ture enhanced parent-child 
and peer-to-peer relationships, 
Rogers said. "When a process 
is defined, there are primary 
tasks and sub tasks, each with 




The next seven releases tighten 
integration, says Serena's Rogers. 

sequential dependencies, and 
perhaps with dependencies to 
other tasks and other process- 
es" in an organization, he 
explained. TeamTrack will now 
have the capability to describe 
those relationships and to 
automate and coordinate the 
assignment of tasks, which 
then can be traced through the 
dependencies, he said. 

Later this year or early next, 
TeamTrack also will be inte- 
grated with the RTM package, 
Rogers added. This will give 
Serena a tool set that can be 
used "from concept to delivery 
of the whole application life 
cycle," he said. RTM already 
has an integration with the 
company's Dimensions enter- 
prise configuration manage- 
ment solution. 



Also in August, Serena will 
release ChangeMan Mover, 
the former Merant Mover 
release management solution. 
Version 2 has an integration 
with the Professional team- 
based development solution 
and Dimensions; TeamTrack 
and ChangeMan DS integra- 
tions should be in the next 
release, Rogers said. 

Professional, which also is 
set for an August update, will 
feature enhanced integration 
with TeamTrack and richer 
IDE integrations. 

An October release of 
Dimensions will feature en- 
hanced issue replication capa- 
bility, Rogers said, claiming 
that as more companies out- 
source development work, 
the ability to do more than ver- 
sion or baseline replication will 
be critical. 

Also, Dimensions will fea- 
ture enhanced build manage- 
ment capabilities in its process 
engine, thanks to an integra- 
tion with the Merant Build 
tool. 

ChangeMan ZF will come 
out in late August or early Sep- 
tember better able to manage 
mainframe changes within 
enterprise application releases, 
and ChangeMan DS will have 
enhanced security and scalabil- 
ity between parallel develop- 
ment sites and stronger peer- 
to-peer capabilities. I 



Berkeley DB Now in Java 



BY EDWARD J. CORREIA 

Sleepycat Software Inc. in June 
released Berkeley DB Java 
Edition (JE), an all-Java ver- 
sion of its application-specific 
transactional database engine 
that it says offers the same 
functionality as the company's 
popular C-language database 
without the data translation 
complexities when using it with 
Java programs. 

"Java developers prefer to 
use databases that are in Java so 
they can run in a single envi- 
ronment and don't have to mess 
with object modules and link- 
ing, because it makes them 
more dependent on the individ- 



ual environments they're 
installing into," said Carl Olof- 
son, program director for infor- 
mation management and data 
integration software research at 
International Data Corp. 

Available now under a dual 
license starting at US$40,000 
are Concurrent Data Store for 
applications with multiple read- 
ers and writers and Transaction 
Data Store for those requiring 
ACID (atomicity, consistency, 
isolation and durability) trans- 
actions and recovery capabili- 
ties. The engine supports 
record-level locking under a 
single-process, multithreaded 
model, and runs on a J2SE 



1.4.2 or later JVM and on J2EE 
app servers. 

The database is delivered as 
a JAR file, and integrates into 
projects without the need to 
load external libraries; its foot- 
print is about 435KB, according 
to the company. The software, 
which includes source code, 
takes advantage of performance 
gains introduced in J2SE 1.4's 
NIO (New I/O) API, which 
reportedly enhances Java in the 
areas of buffer management, 
network scaling, file I/O and 
regular expression matching. 

The Berkeley DB JE can 
be downloaded now at www 
.sleepycat.com/javaed. I 
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Quest: Toad Makes SQL Better 



Graphical database management tool designed to work with Oracle 



BY YVONNE L. LEE 

Quest Software Inc. this month 
will ship version 8.0 of its 
graphical database manage- 
ment tool, Toad for Oracle, 



with four main new features. 

They are a code improve- 
ment component called Code- 
Xpert, SQL tuning, a SQL exe- 
cution engine, and an improved 



interface, said Bryan Huddle- 
ston, product marketing man- 
ager for database development 
solutions. 

The new version is available 



in three editions: Toad for Ora- 
cle, Toad for Oracle Profession- 
al and Toad for Oracle Xpert. 

"CodeXpert advises you on 
how to write code better," Hud- 
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dleston said. "It says, this is a 
problem and here's what you 
can do to correct it." 

It analyzes stored proce- 
dures against a set of rules and 
then offers corrective recom- 
mendations. 

The enhanced SQL tuning 
now includes an Oracle Script 
Debugger, Huddleston said. 

Toad began its life in 1997 as 
a freeware graphical tool for 
administering Oracle data- 
bases, Huddleston said. When 
the product began, it solved the 
problem of entering SQL state- 
ments when it was not possible 
to backspace with Oracle's 
tools, he claimed. 

Now, with the expanded fea- 
tures, Quest charges a mini- 
mum of US$870 per seat for 
the product. 

Toad's main purposes are to 
enter SQL statements, to man- 
age object databases, and to 
deal with database-specific 
stored procedural languages, 
he said. I 

LogiXML Frees 
LGX Report 

BY YVONNE L. LEE 

LogiXML Corp. has changed 
how it markets one of its .NET 
reporting tools, now offering 
LGX Report free for the first 
single processor installation 
within an organization, and sell- 
ing an enhanced version. 

LGX Report, which includes 
a built-in IDE and can be cus- 
tomized, will be offered in two 
versions: LGX Report and LGX 
Report Plus. 

LGX Report will be offered 
free for one installation, but 
subsequent installations will 
have to be purchased, said 
Dave Ploger, vice president of 
LGX tools. "If you're a small 
site, you might get it for free, 
but if you're a large site where 
you need extended capabilities 
or you have systems with mul- 
tiple CPUs, we hope to gain 
those folks as paying cus- 
tomers," he said. 

LGX Report Plus adds the 
ability to deliver reports via 
e-mail, report scheduling, cus- 
tom alerts, and role-based autho- 
rizations at the column and row 
level. The reporting tool can be 
extended using plug-ins to 
Microsoft's .NET Framework, 
Ploger claimed. 

LogiXML's current LGX 
Report customers will be auto- 
matically upgraded. I 
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Whatever the Name, It's All About Integration 

Consortium changes name to distance itself from EAI, devises a common framework 



BY YVONNE L. LEE 

To hear John Schmidt, Best 
Buy Co. Inc.'s leader of systems 
integration and middleware, 
tell it, getting his job done is a 
"hairball." 

"We have 40 discrete busi- 
ness applications. All these 
applications were built up over 
15 or 20 years," he said. "A lot 
of them have different data for- 
mats, different data models, 
languages [and] interface pro- 
tocols and were built on differ- 
ent platforms." 

The Integration Consor- 
tium, formerly the Enterprise 
Application Integration Indus- 
try Consortium, in late May 
introduced a strategy to make it 
easier for organizations such as 
Best Buy to make their applica- 
tions work together. 

The group renamed itself 
because the acronym EAI 
refers to a specific kind of mid- 
dleware for integration used in 
the late 1990s, which is being 
replaced by newer methods. 
For example, many companies 



have been looking to Web ser- 
vices as a method to integrate 
both internal and external 
applications. 

Schmidt is chairman of 
the Integration Consortium's 
methodology committee and 
selected the ingredients for the 
effort, which is called the Global 
Integration Framework (GIF). It 
is not a framework in the sense 
that software developers think 
of the term, meaning a modular 
set of program components, 
although such a set of compo- 
nents will be one part of the 
GIF, Schmidt said. Instead, the 
GIF is a soup-to-nuts attempt to 
coordinate how organizations 
should describe, define and doc- 
ument their software develop- 
ment practices, as well as an 
effort to educate organizations 
about the practices. 

"It is kind of prescriptive; 
you don't have to use all facets 
of it," Schmidt explained. 

He also said the consortium 
was unaware of the Graphics 
Interchange Format, devel- 
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The Global Integration 
Framework attempts to make 
software development best 
practices common. 



—John Schmidt, chairman of the Integration 
Consortium's methodology committee 



oped by CompuServe Interac- 
tive Services Inc. and common- 
ly used on the Internet, when it 
decided on the acronym. 

Organizations endorsing the 
GIF are Adaptive Inc., Ava- 
lanche Consortium, Crowe 
Chizek and Co. LLC, Ground- 
swell Revolution Group of Com- 
panies Corp., IBM Corp., Libra- 
dos Inc., Software AG, Sonic 
Software Corp., ThoughtWorks 
Inc., Tierl Innovation LLC and 
The Open Group. 

The GIF also will include an 
area for exchanging code, but 
mostly it endorses other peo- 
ple's work. 

The group plans to provide a 
repository at a site sponsored by 



the Avalanche Technology Col- 
laboration Cooperative. It will 
include a method of describing 
work processes contributed by 
Johnson & Johnson Inc. The 
repository will comply with 
Object Management Group's 
Meta Object Facility. It has 
endorsed the Open Group's 
enterprise architecture and 
development methodology as 
well as design methods based on 
Gregor Hohpe's book "Enter- 
prise Integration Patterns." 

However, several integration 
software vendors have been 
notably cool on the framework. 

"There are a number of dif- 
ferent architectural frameworks. 
I don't think there's ever going to 



be a single framework for inte- 
gration," said Sam Boonin, vice 
president of marketing at Blue 
Titan Software Inc. "Different 
companies of different sizes have 
different methodologies." 

TIB CO Software Inc. has a 
competing framework, which 
has been developed with 
Hewlett-Packard Co. and Intel 
Corp. 

"The Enterprise Reference 
Architecture provides our cus- 
tomers with an architectural 
framework to deploy and man- 
age their heterogeneous IT 
infrastructure and effectively 
leverage existing technology 
investments," said Aiaz Kazi, 
TIBCO's general manager of 
business integration. "While 
the GIF is too new to com- 
ment, we welcome efforts in 
this direction as it further vali- 
dates and underscores the ERA 
value proposition." 

Web Methods Inc., which is 
a member of the Integration 
Consortium, declined to com- 
ment on the GIF effort. I 
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Freedom of Choice Among Themes at LinuxWorld 



BY EDWARD J. CORREIA 

Freedom of choice and betting 
the business on Linux are 
among the keynote themes at 
this year's LinuxWorld Confer- 
ence & Expo, taking place Aug. 
2-5 at the Moscone Center in 



San Francisco. The show is 
organized by IDG World Expo. 
Encouraging choice will be 
Matthew Szulik, president 
and CEO of Red Hat Inc., 
which asserts that its recently 
released desktop Linux gives 



users of Microsoft operating 
systems a choice not to be. 
Drawing analogies to the auto 
industry after the influx of 
Japanese autos in the 1970s, 
and the telecom industry after 
the Bell breakup in the 1980s, 



Szulik predicts that such free- 
doms will transform the soft- 
ware industry. 

Before betting the farm, 
developers might want to stop in 
on "Betting your Business on 
Linux and Open Source," during 
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which Martin Fink, Hewlett- 
Packard Co.s vice president of 
Linux, will discuss some of the 
realities of deploying Linux and 
other open-source software in a 
mission-critical enterprise infra- 
structure. 

Conference tracks this year 
will include about 60 classes on 
desktop Linux, operating in 
mixed environments, Linux 
management, security, kernel 
development, emerging tech- 
nologies and developer issues. 
The latter track includes a 
course subtitled "Dealing with 
Dr. Jekyll and Mr. Hyde," 
which will explore the intrica- 
cies of developing for todays 
so-called bi-arch processors, 
such as the x86_64 and 
Sparc64, which permit 32- and 
64-bit applications to run on 
Linux side by side. I 
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CONFERENCE: 

Aug. 2-5 

Moscone Center, San Francisco 

TUTORIALS: 
Monday, 9 a.m.-4 p.m. 

CLASSES: 

Tuesday, 10:15 a.m.-2:30 p.m. 
Wednesday, 9:15 a.m.-5 p.m. 
Thursday, 9 a.m.-2:15 p.m. 

EXHIBITS: 

Tuesday, 10 a.m.-5 p.m. 
Wednesday, 10 a.m.-5 p.m. 
Thursday, 10 a.m.-4 p.m. 

HANDS-ON LABS: 
Monday, 9 a.m.-4 p.m. 

GOLDEN PENGUIN BOWL: 
Tuesday, 4:30 p.m.-5:30 p.m. 

KEYNOTES: 

Tuesday, 9:15 a.m.-10 a.m., 
"Freedom of Choice," Matthew 
Szulik, Red Hat Inc. 

Tuesday, 11:45 a.m.-12:30 p.m., 
"Betting Your Business on Linux 
and Open Source," Martin Fink, 
Hewlett-Packard Co. 

Tuesday, 2:45 p.m.-3:30 p.m., 
"Linux: the True Opportunity," 
Michael Rocha, Oracle Corp. 

Wednesday, 11 a.m.-11:45 a.m., 
"Linux Innovation: Driving the On 
Demand Era," Nick Donofrio, IBM Corp. 

Wednesday, 2:30 p.m.-3:15 p.m., 
"Building Competitive Advantage 
With Linux," Alfred Chuang, 
BEA Systems Inc.; Mike Parks, 
Virgin Mobile USA LLC 

www.linuxworldexpo.com 
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Apple Reveals Eye of the Tiger 



< continued from page 1 

who pulled the covers off the 
operating system update here at 
the company's annual World- 
wide Developers Conference in 
late June. Tiger, more formally 
Mac OS X 1.4, will ship some- 
time in the first half of 2005, he 
promised. 

Many of the changes to Mac 
OS X appear to be incremental 
improvements to its bundled and 
integration applications. For 
example, iChat AV, the audio/ 
video conferencing system, now 
can support as many as 10 voice 
or three video users simultane- 
ously. Safari, Apple s Web brows- 
er, now can read RSS (Real Sim- 
ple Syndication) feeds. Tiger also 
will work natively with H.264, an 
emerging MPEG standard 
codec for high-definition video. 

CUT TO THE CORE 

The core changes to the oper- 
ating system are more substan- 
tial. Tiger now allows both 32-bit 
and 64-bit memory addressing 
for applications running on 
the PowerPC G5 processor. Al- 
though the previous Panther 
release, timed for the 64-bit G5 
chip's debut last year, could run 
both 32-bit and 64-bit apps, it 
was limited to a 32-bit memory 
address space. Tiger also will 
support LP64, a common Unix 
model for using 64-bit pointers. 

Also new to the operating 
system are Core Image and 
Core Video, a real-time trans- 
formation engine for still 
images and movies, similar to 
Core Audio, introduced with 
Panther. According to Jobs, 
Tiger will include a set of more 
than 100 filters — called Image 
Units — that are also accessible 
via API. 

The FreeBSD-based operat- 
ing system kernel itself has been 
updated to include more granu- 
lar resource locking for multi- 
processor machines, as well as 
clustering. It also accommo- 
dates System V message queues 
and standard open-source 
libraries for XML transforma- 
tions and data persistence, 
according to Apple's prelimi- 
nary documentation. Apple also 
will be including a native 64-bit 
Java Virtual Machine. 

In his keynote, Jobs didn't 
mention the updates to the 
Xcode environment, but pre- 
liminary documents distributed 
at the conference indicate that 
it will be based on the gcc 3.5 
compiler, modified by Apple; 



the original Xcode shipping 
today is based on gcc 3.3. 

The updated IDE also will 
include a new visual modeling 
tool that can generate class dia- 
grams based on existing source 
code, and modify those dia- 



grams in real time as the code 
changes. The compiler also will 
include switches for both 32-bit 
and 64-bit binaries, and can 
generate single "Fat Binaries" 
that contain both 32-bit and 
64-bit code that can run on ear- 



lier versions of Mac OS X and 
older hardware platforms — the 
PowerPC G3 and G4 proces- 
sors are 32-bit only. 

According to Jobs, "The 
transition to Mac OS X is over," 
with more than half of the com- 



pany's installed base of Macin- 
tosh users having moved to the 
new codebase. 

An update to Mac OS X Serv- 
er also will ship in the first half of 
2005, says Apple. Tiger Server 
will include a Web log server, 
iChat server, a software update 
server, and Xgrid, Apple's clus- 
tering software. I 
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New SQLfX: Is It Progress or Piffle? 



4 continued from page 1 

XQuery's XPath. "With XPath 
calls, you go down one leg at a 
time," he said, with manual 
coding required to traverse 
more than one leg at a time. 



"XQuery s FLWR statement has 
loop statements. But you'd have 
to do your own correlation 
between paths and set up a dif- 
ferent path call on each leg, and 
that gets complex." 



Conversely, David claimed 
that SQL handles such naviga- 
tions automatically, and does not 
require prior knowledge of the 
data structure. "Our research 
found that if you define the data 



hierarchically, the ANSI engine 
automatically processes it hier- 
archically. Which should not 
come as a surprise; that's what 
relational engines are supposed 
to do, relate data." 
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At the heart of SQLfX, 
which David expects to release 
in mid-2005, is SQL's "outer 
join" operation. This brings two 
hierarchical structures together 
as a means of coping with 
XML's nesting. "If you've ever 
looked at two legs of an org 
chart to see how they're related, 
that's what this does. The user 
doesn't have to know the struc- 
ture; they just need to say what 
data they need." 

The logic involved in coding 
that manually using XQuery's 
XPath, David said, would be to 
follow the different paths up to 
a common ancestor node and 
back down again, which is very 
complex. 

OUTER JOIN LIMITS 

Taking an opposing view is Jim 
Melton, consulting member of 
technical staff and standards at 
Oracle Corp. and the com- 
pany's representative to the 
W3C's XML Query working 
group. "I won't say [David's] 
obsessed with the notion, but 
he does seem intent on the 
belief that the outer join opera- 
tion is the only thing necessary 
to solve a great many prob- 
lems," relating to SQL-XML 
integration, he said, including 
handling of every level of nest- 
ing in the XML structure. 

"Because XML documents 
can and often do have a large 
maximum depth of nesting, 
with 10 or 15 levels not uncom- 
mon," Melton continued, "a 
combination of 10 to 15 outer 
joins would be required to 
reassemble the data into a hier- 
archical representation," which 
he said is enough to make many 
SQL engines bog down. 

Ironically, David claims to 
address these inefficiencies with 
proprietary algorithms. 

Current big-three solutions 
shred XML for storage in rela- 
tional systems, a technique crit- 
icized by David. "When you 
shred and flatten XML and join 
it to relational data, you have a 
data explosion because of the 
flat structures joining and you 
have memory and processing 
inefficiencies. There have been 
solutions to get around that, 
but a lot of them are nasty and 
inefficient." 

Melton said David's criti- 
cism "presumes that those 
[shredding] techniques are 
going to remain the default 
handling for SQL vendors inte- 
grating XML support into their 
products," which he said is not 
necessarily the case, but did not 
elaborate further. I 
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Pollinate Adds Eclipse Support to Beehive 



Instantiations will lead project to build tools for BEA-based framework 



BY YVONNE L. LEE 

If BEA Systems Inc. used its 
own eWorld Conference in 
May to build a Beehive, then at 
June's JavaOne conference the 
bees began to Pollinate. 

The flowers, in this case, are 
tools that work with Beehive, 
the service-oriented architec- 
ture framework BEA submitted 
to the Apache Foundation at 
eWorld. The new Pollinate is an 
Eclipse project designed to cre- 
ate Eclipse-based tools that 
work with Beehive. Instantia- 
tions Inc., which builds Eclipse 
tools, will lead the project. 

Under the Beehive frame- 
work, developers write programs 
by dropping in components 
called controls. Controls are cur- 
rently compatible only with 
BE As Web Logic server, but one 
of the stated goals of the Beehive 
framework was to make them 
work with Apache s Tomcat con- 
tainers later this year. 

"The Eclipse support puts 
four IDEs [in the market], all of 
which can take advantage of the 
Beehive programming model," 
said Dave Cotter, BEAs direc- 
tor of developer marketing. 

Those tools are BEAs Web- 
Logic Workshop, Compuware's 
IntelliJ, Oracles JBuilder, and 
Eclipse. 



Some observers have said 
that Beehive was designed to 
bring more tools available 
that could write programs for 
deployment only on BEAs own 
Web Logic application server, 
but the San Jose company says 
it hopes that other application 
server vendors will adopt the 
Beehive methodology, with 



Apache as only a first step. 

"You can't call it a standard 
when it runs on only two con- 
tainers," admitted Cotter. "As 
we add additional platform ven- 
dors, it will emerge as a de fac- 
to standard." 

Eclipse Foundation execu- 
tive director Mike Milinkovich 
said his organization would not 



have created the Pollinate ini- 
tiative if it were simply to 
advance BEAs server. "Once 
you have companies such as 
IBM and Oracle embracing it, it 
does in fact become a de facto 
standard," he said. 

Instantiations CEO Mike 
Taylor said that Beehive's goal is 
to gain market share not from 



other Java application server 
vendors, but from Microsoft. 

"Everybody on the Java side 
looks on the Visual Basic and 
.NET world and lusts after those 
6 million programmers," said 
Taylor. "Java has maybe 3 mil- 
lion. All of us in Java would like 
to have the 3 million we have 
and some of the 6 million." I 



Spotlight on Sun SOA 



continued from page 1 

release the JDesktop Network 
Components (JDNC) and 
JDesktop Integration Compo- 
nents (JDIC). JDNC simplifies 
developing rich networked 
desktop applications, while 
JDIC integrates cross-platform 
Java technology-based applica- 
tions with the native desktop, 
according to the company. 

Project Looking Glass is 
available under the GNU Gen- 
eral Public License. JDIC and 
JNDC are available under 
the Lesser General Public 
License. Details of these licens- 
es are available at gnu.org and 
opensource.org. 

Sun officials did not give 
details of how it will offer 
Solaris, although chief technolo- 
gy evangelist Simon Phipps said 



it is still in the plans. "We still 
believe Solaris is an extremely 
important asset for Sun," he 
said, "and we're committed to 
making that a collaborative envi- 
ronment." The time scale and 
licensing scheme are still to be 
determined, he said but added 
that Sun would not "go it alone" 
to create a separate collabora- 
tion group as it had with the Java 
Community Process (JCP). He 
said he believed such a collabo- 
rative move could spur more 
software for Solaris. 

"The main focus of open- 
source development is enfran- 
chising developers to create 
software," he said. 

As Sun moves the Java plat- 
form ahead, it will add service- 
oriented architecture (SOA) fea- 
tures, said Rick Shultz, group 



product manager for the J2EE 
platform and application server. 

Sun plans to phase elements 
of the SOA effort into the Java 
Enterprise System and Java Stu- 
dio Enterprise developer envi- 
ronment over the next two years, 
with initial deliveries scheduled 
for the first half of 2005. 

Part of what will be phased 
into Java Studio Enterprise will 
be a new development system 
that uses interactive diagrams 
to build service-oriented appli- 
cations by spelling out their 
communication flow. 

Along with Sun's service- 
oriented strategy is JSR 208 for 
Java Business Integration — 
Sun proposed the JSR and 
leads its Java Community 
Process expert group. It will 
offer a standard version of a 
Java integration platform that 
Business Process Execution 
Language services and integra- 



tion adapters can plug into, 
said Schultz. JSR 208 may be 
included in a version of Java 
"beyond J2EE 5.0," he said. 

If you blinked, you might not 
have noticed that Sun changed 
the product numbering for its 
Java 2 Standard Edition. Under 
development, it had been 
referred to as J2SE 1.5 following 
the previous numbering conven- 
tion, but it was demonstrated at 
JavaOne as J2SE 5.0. 

This is because the language 
itself has been updated, said 
Dennis MacNeil, senior product 
marketing manager. The num- 
bering for J2EE also will be 
changed when it is released near 
the end of 2005, Schultz said. 

In addition to the open 
source and SOA plans, Sun 
released NetBeans 4.0 and Java 
Studio Creator and demon- 
strated J2SE 5.0, as previously 
reported. I 



Many Ways to Skin .NET and Java Integration 



< continued from page 5 

Instead of providing a proxy 
that translates on-the-fly bet- 
ween the two classes, Janeva 
inserts code that gets com- 
piled with the application, 
Taisipic said. 

"Janeva is inherently part of 
the .NET application," he said. 
"Janeva is compiled into the 
application itself. When you 
deploy your application, Janeva 
is part of it." He described this 
as more direct than the bridge 
approach and added that in 
many cases, using a bridge 
requires .NET programmers to 
understand something about 
J2EE or CORBA. 

Recursion Software Inc. 
introduced at JavaOne a connec- 
tivity software package that, like 
Janeva, inserts code for connect- 
ing to the other platform into the 
finished application. But unlike 
Janeva, Recursion's Cinergi can 
connect Java applications to exist- 
ing C++ and C# applications, as 



L* 



well as connect C++ 
and C# applications to 
Java. Cinergi's compil- 
er binds proxies to the 
old application and 
adapters to the new 
one. The adapter 
makes calls to the old 
application. 

Recursion execu- 
tive vice president 
Claire Lewis -Martin 
pointed out, howev- 
er, that to use her 
company's applica- 
tion, architects must 
select the individual DLLs, .jar 
files and other required files 
that they want to address with 
the new application. 

IT'S ALL ABOUT SHARING 

Mainsoft Corp.'s Visual Main- 
Win for J2EE is designed for 
organizations to deploy .NET 
and J2EE applications on a sin- 
gle J2EE infrastructure. It 
makes it possible to use C# and 



V3.NET 



Java 
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Mainsoft's Visual MainWin for J2EE compiles Microsoft 
languages C#and VB.NET into Java bytecode, enabling pro- 
grams written in those languages to be run on a Java stack. 



Visual Basic .NET on a Java 
server. It does this using a pro- 
prietary compiler that takes 
Microsoft Intermediate Lan- 
guage (MSIL) and compiles it 
into standard Java bytecode. 

It isn't designed to integrate 
applications, but to enable 
.NET and Java teams to work 
together on projects, said Main- 
soft CEO Yaacov Cohen. 

"We are saying, 'Why do you 



need two stacks with 
overlapping function- 
alities?' " he said. "We 
are not trying to 
merge applications. I 
think there are enter- 
prise application inte- 
gration vendors that 
are really attacking 
this problem. That's 
not what we are trying 
to do. These guys are 
doing a great job of 
solving this problem. I 
want to help my .NET 
and Java teams work 

together and help me simplify 

my infrastructure." 

WHEN INTEGRATION WORKS 

A final approach is to purchase 
individual connectors, like 
those from traditional integra- 
tion vendors such as See- 
Beyond Technology Corp. and 
Web Methods Inc. 

JnetDirect Inc. uses this 
approach but focuses on Java 



and .NET, as opposed to con- 
necting with business applica- 
tions like SAP and Siebel. Jnet- 
Direct has a series of products 
that connect Java and Web ser- 
vices with various aspects of the 
.NET architecture. JSQLCon- 
nect links J2EE, JSP and Java 
applications with information on 
Microsoft SQL server databases. 
JSQLMapper translates XML 
and SQL Server data. JnetDi- 
rect's latest product, JnetDirect 
Business Integration System 
(JBIS), is designed to link two 
existing applications without cre- 
ating one large distributed appli- 
cation, said CEO Burke Cox. 

"A team might select Janeva 
when they have existing J2EE 
or CORBA server applications 
and are beginning to introduce 
new .NET client applications 
into their environment," said 
Burke. "JBIS is appropriate for 
independent software vendors, 
especially vendors of Java or 
J2EE solutions who want to 
provide the capability for man- 
aged interaction to and from 
other applications."! 
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SCO Steps Into Embedded Market With Smallfoot 

Configurable UnixWare targets resource-constrained point-of-sale, industrial devices 



BY EDWARD J. CORREIA 

The SCO Group Inc. is mak- 
ing its first foray into the 
embedded operating system 
market with Smallfoot, an 
embeddable version of its 
UnixWare operating system 
for x86 hardware that it says 
can run in devices with as little 
as 16MB of memory 

While customized versions of 



SCO's UnixWare have been seen 
in telecommunications and oth- 
er embedded systems for years, 
according to Sandy Gupta, 
senior director of SCO's Unix 
Division, Smallfoot addresses 
embedded development needs 
with diskless booting, network 
software installation and other 
capabilities. The software is 
intended for development of 



point-of-sale terminals, kiosks, 
network equipment and indus- 
trial control devices, and in- 
cludes drivers for USB, stylus, 
touch screen, printers, scanners 
and magnetic card readers. 

Available now, the US$999 
SDK also includes an embedda- 
ble kernel based on UnixWare 
7.1.4, Xwindows GUI environ- 
ment and a Unix-hosted devel- 



opment tool that Gupta said 
contains preset configurations 
for specific target hardware. 
"Various configurations can be 
selected, such as network card, 
graphics, a browser and the cus- 
tomer's own application," he 
said. "Most developers will find 
that the configuration they are 
trying to build is already there 
and just needs a little tweaking." 



Stronger Authentication Is In Java's Cards 

Security tools due this fall echo Sun's own internal solution 



BY EDWARD J. CORREIA 

The JavaCard-based security 
system now in use by employees 
of Sun Microsystems Inc. will 
soon be available to the public. 
The company at JavaOne in late 
June began offering early access 
to the JavaCard Enterprise 
Edition, a productized version 
of its own end-to-end authenti- 
cation system that it says can 
form a foundation for enterpris- 
es seeking to fortify application 
security through smart cards and 
software. 

According to Peter Catta- 
neo, director of Sun's JavaCard 
business, the solution provides 
for authentication between the 
JavaCard and an LDAP direc- 
tory "for any organization that 
wants to add two-factor 
authentication to increase the 
security in their environment." 

He said developers will have 
two ways to exploit the technol- 
ogy. "The easy way is for devel- 
opers to write server-side code 
that just looks to the directory 
and gets the benefits of 
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Sun's JavaCard Enterprise Edition is billed as a platform for building hard- 
ware-based application security. 



stronger authentication. If they 
want to do a little more work, 
they can write some code that 
runs on the JavaCard and the 
client or server, and tie this 
together to do more sophisticat- 
ed forms of authentication." 
Cattaneo claimed that Unix or 
Windows apps that are already 
performing log-in authentica- 
tion will require no modifica- 
tions to support the solution. 



Out of the box, the soft- 
ware, which is due for general 
release this fall, will run with 
Sun's Java Enterprise servers, 
but according to Cattaneo, 
it also can be integrated 
with non-Sun systems. "This 
uses servlets, but primarily 
links against a Web server's 
LDAP directory, so there's no 
app server required. And since 
it's standards-based, it can be 



integrated with anything you 
like," he said. 

J2ME WIRELESS ADVANCES 

Sun also released to beta J2ME 
Wireless Toolkit 2.2, adding 
support for APIs specified in 
four JSRs. Scheduled for gener- 
al availability later this year, the 
free wireless tools will support 
the multimedia wireless mes- 
saging API (JSR 205), mobile 
3D graphics (JSR 184), Blue- 
tooth (JSR 82) and the PDA 
optional package (JSR 75), 
which specifies a series of 
optional packages of PIM appli- 
cations commonly found on 
handheld computers. 

Sun also announced that 
Orange, RIM and T-Mobile 
have joined its Java Verified 
Program, which permits devel- 
opers to submit applications to 
a single body for testing and 
verification on multiple net- 
works and devices. The pro- 
gram was founded in February 
with Motorola, Nokia, Siemens 
and Sony Ericsson. I 



MICROSOFT ALLOWS WINDOWS CE LICENSEES TO KEEP CHANGES 



< continued from page 1 

said the change also was 
prompted by prospective Win- 
dows CE customers tempted by 
the freedoms of open source. 
"Their desire was to have the 
flexibility to modify or tweak the 
operating system and distribute 
derivatives. This addresses those 
new customer requirements and 
tells OEMs that changes [to the 
operating system] remain their 
intellectual property." Stark- 
weather added that often cus- 
tomers have requested to alter 
an aspect of Windows CE for a 



particular device or customized 
application scenario. "And in- 
stead of us putting the change 
on a list for a future version, 
we're saying go ahead." 

Brix contrasted Microsoft's 
policy with the widely used 
open-source General Public 
License (GPL). "If developers 
make changes to our kernel or 
other parts of our source, that 
remains their intellectual 
property, and they have no 
obligation to share with Mi- 
crosoft, the community or any- 
body else. My understanding 



of open-source software gov- 
erned by a GPL is that while it 
allows developers to innovate, 
it doesn't allow sustainable 
differentiation." 

Sharing requirements remain 
in effect under the Shared 
Source Premium Program, 
which exposes code in excess of 
the standard Shared Source pro- 
gram. "That's because there is 
additional code made available 
from third parties and govern- 
ment [agencies]," explained 
Starkweather. Participants in 
that program are compelled to 



return "feedback to Microsoft on 
improving the Windows CE 
codebase," according to the 
company's Web site. 

Starkweather said that aside 
from the increased flexibility of 
licensing and an ongoing need 
to add support for the latest 
wireless, graphics and security 
standards, there weren't any 
big feature requests for Win- 
dows CE 5.0. The version will 
add 60 device drivers, remote 
performance monitoring, and 
support for Microsoft's Direct 
3D Mobile graphics API. I 



Once created, the software 
image can be loaded directly to 
the target or onto a CD for dis- 
tribution. Royalties start at $65 
per device with a 500-device 
minimum. 

Despite the appearance of a 
company scrambling to offer 
an alternative to Linux, Gupta 
insisted the decision was pure- 
ly customer-driven. "We are 
still very strong in the retail 
sector," he said, explaining that 
current retail solutions often 
pit point-of-sale machines 
against back-end systems run- 
ning different operating sys- 
tems and applications. "We are 
trying to put together an end- 
to-end solution for our retail 
customers that communicates 
seamlessly with systems in 
their store. 

"Our SCO IP licensing is 
separate from what we do on 
the product side," added Marc 
Modersitzki, a SCO marketing 
manager. "We are still offering 
IP licenses for Linux." 

SCOx PLAYS HOST 

SCO also released SCOx Web 
Services Substrate, an updated 
version of the company's Web 
services development frame- 
work that integrates Ericom's 
Host Publisher, adding the abil- 
ity to turn character-based 
applications into Web services. 
"For example, if I have a 
COBOL application running in 
Xenix that I want to reuse, Host 
Publisher running on a server 
would convert all of the app's 
input and output to Web ser- 
vices," explained Gupta. Data 
can then be viewed through a 
Web browser or used within 
front ends developed using 
SCOx's WebFace tools. 

Also new is SQL Encapsula- 
tor, which Gupta described as 
an abstraction layer that allows 
SQL databases to be controlled 
through Web services. "If you 
have a database back end from 
Oracle or Informix, you can use 
a Web service to add, delete or 
change anything in your data- 
bases," he said. The tool sup- 
ports SQL commands and 
stored procedures and requires 
no low-level programming. 

A five-session SCOx license 
is included with UnixWare 
7.1.4, which was released in 
mid-June. Additional licenses 
cost $1,895 for 10 sessions. I 



the Oracle Platform 
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Application Server 10g 



Common LDAP directory 
Unified security model 



Common administration 



Automated space management 



Engineered to work together 




oracle.com/platform 
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Tree' programs help Linux backers sell ISVs 
expensive software and support offerings 



Free is good. But knowing the 
catch is key. 
Linux backers, including IBM 
Corp., Novell Inc. and Red Hat 
Inc., are offering ISVs free or low- 
cost help in developing and marketing 
commercial products for the open- 
source operating system. And while 
most are more comfortable spreading 
the gospel of Linux, they also acknowl- 
edge their larger agenda: getting ISVs to 
buy into their technology stacks — and 
purchase their costly, round-the-clock 
support offerings. 

"There is always a hitch," said Craig 
Downing, vice president of product 
management at ACCPAC International 
Inc., in Pleasanton, Calif., an ISV that 
sells accounting, CRM and other busi- 
ness applications for Linux and Win- 
dows, among other operating systems. 

With help from IBM's free Speed 
Start Your Linux Apps program, 
ACCPAC ported its Windows offerings 
to Linux. Launched two years ago, the 
program offers online resources, such as 
sample code and answers to frequently 
asked questions, to help developers new 
to Linux get started, said IBM's program 
director of worldwide developer 
marketing, Kathy Mandelstein. 
The program's technical brief- 
ings, which focus on building 
Linux applications using IBM's 
WebSphere, DB2 and Tivoli 
product lines, are free to ISVs 
that buy IBM's middleware. 

ACCPAC is proactively pro- 
moting the Linux versions of 
its products, in part because 



Microsoft Corp. sells competitive account- 
ing and CRM software aimed at midsized 
businesses, said Downing. But IBM offers 
another incentive: The company sells the 
Linux edition of DB2 for half the price 
of the Windows version. That helps 
ACCPAC convince its customers, who 
must also buy DB2, to go with the Linux, 
not the Windows, version of its products. 

MONEY-MAKING OPPORTUNITY 

Getting their customers — and their cus- 
tomers' customers — locked into their 
product strategy is ultimately what free 
programs for Linux ISVs are about. "The 
money-making opportunity is having 
Linux as the foundation to other parts of 
our stack," said Hal Bennett, vice presi- 
dent of business development at Novell, 
in Orem, Utah. 

The company, which completed its 
acquisition of SUSE Linux earlier this 
year, recently launched PartnerNet. 
The program combines Novell and 
SUSE Linux partners, lets developers 
download SUSE Linux for free, and 
gives them access to online resources 
such as FAQs. For US$1,500, Novell 
provides programs that help ISVs write, 



Hyperion needed a 
partner that could 
provide intensive 
support 

-Srikant Gokulnatha, 

director of product strategy at 

Hyperion Solutions Corp. 





market and sell their Linux offerings, 
said Bennett, noting the fee is nego- 
tiable for start-up companies. For 
instance, Novell will work with an ISV 
to identify potential markets by geogra- 
phy or industry sector. It also invites 
ISVs to participate in 
road shows that fea- 
ture Linux software. 
"They can benefit from 
the entire Novell eco- 
system," said Bennett. 

IBM also helps 
Linux ISVs keep mar- 
keting costs down. 
"They shared the 
burden of our market- 
ing expenses," said Curt Finch, CEO of 
JournyX Inc., an Austin, Texas-based 
company that sells Web-based time and 
expense tracking software. 

One reason why programs such as 
those offered by IBM and Novell are 
gaining traction is that Linux is growing 
up. "We're hearing about Linux 
programs because they are relatively 
new," said Michael Mullany, vice presi- 
dent of marketing at VMware Inc., in Palo 
Alto, Calif. By contrast, Microsoft has 
offered free resources for Win- 
dows developers for years, he 
said. (See sidebar, "Catching Up 
With Microsoft?") While offer- 
ings for Windows developers are 
"formal and corporate," said 
Mullany, Linux programs tend to 
be more "freelance." 

VMware sells software that 
lets multiple operating systems 
run concurrently on a single 



piece of hardware. Its products, which 
originated on Linux, also are available on 
Windows. 

People no longer question whether 
Linux is a viable platform, echoed 
ACCPAC's Downing. "In the last few 



Linux developer 
programs are more 
'freelance' than 
Microsoft's. 






-Michael Mullany, vice president 
of marketing at VMware Inc. 

years, in terms of support and mainte- 
nance, the Linux vendors are there." 
The need for serious support led Hype- 
rion Solutions Corp., in Sunnyvale, 
Calif., to purchase Red Hat's premier 
support offering to help port its Business 
Performance Management Suite from 
Windows to Linux. "We needed to work 
with a partner that understands enter- 
prise software development and could 
provide intensive support," said Hyperi- 
on's director of product strategy, Srikant 
Gokulnatha. 

Because Hyperion's software, which 
enables companies to access, analyze 
and share data about how the business is 
performing, includes a development 
platform, many of its customers are 
also Red Hat's. "If an issue arises with 
one of our customers, Red Hat will 
notify us immediately," said Gokulnatha. 
There is a shared expectation among 
► continued on page 28 
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all three parties, he said. 

The Red Hat Developer Connec- 
tion lets ISVs download its Linux dis- 
tribution for free and provides limited 
access to developer-related informa- 
tion. The company's premier support 
program provides customers such as 
Hyperion with a dedicated point of 
contact, advice for developers and 
access to programming tools, and guar- 
antees one-business-day turnaround. 
Other than to characterize the invest- 
ment as significant, Gokulnatha would 
not divulge how much Hyperion pays 
Red Hat for this support offering. He 
also declined to say how the cost of 
Red Hat support compares with 
Microsoft's. 

While the buzz around Linux is that 
it's cheaper, both ACCPAC's Downing 
and IBM's Mandelstein acknowledged 
that costs for Microsoft support and Lin- 
ux support are comparable. "There is 
not a tangible difference in the price," 
said Downing. "Round-the-clock sup- 
port is expensive everywhere." 

Downing noted that developing on 
Windows is more expensive than Linux 
because Microsoft locks you into its 
product strategy. "What happens when 
Longhorn hits? Will we have to roll out 
a new version of our accounting sys- 
tem?" He admitted that IBM and other 
Linux advocates also get ISVs to buy 
into their product strategies. But 

CATCHING UP WITH MICROSOFT? 



because Linux is not controlled by a sin- 
gle vendor, it doesn't lock you in to the 
same degree. There are more choices to 
buy into, he said. 

STILL A WINDOWS WORLD 

ACCPAC is seeing Linux adoption rise. 
In January 2004, about 24 percent of 
shipments of its accounting system were 
on Linux, compared with 5 percent in 
January 2003, said Downing. Unix and 
the AS/400 accounted for 1 percent, 
and Windows for 75 percent, he said. 

JournyX's Finch has seen a smaller 
increase. "A year ago, Linux was 15 per- 
cent of our business. Now it's 25 per- 
cent. But our product has been ship- 
ping on Linux for seven years. I thought 
it would be a lot further along than it 
is," he said. 

One reason why the numbers aren't 
higher is that most Linux is used today 
for custom-built Web and distributed 
applications, not for packaged enterprise 
applications, said Erin Kinikin, a vice 
president and research director at For- 
rester Research Inc., in a statement. 

Despite slow growth, Linux contin- 
ues to make inroads against Microsoft, 
riding strong sales and marketing efforts 
by the big platform vendors. "If you're 
the guy at Red Hat who sells Linux 
servers, if even one customer opts for 
Windows, it will be seven or eight years 
before that customer reviews that deci- 
sion again," said Downing. I 



With its firm hold on 
the desktop, Microsoft 
Corp.'s offerings for 
ISVs aren't likely to 
make the headlines. But, 
in fact, the company has 
sponsored programs to 
support ISVs using its 
products for years. 
"They have made a 
tremendous effort to 
create a developer- 
friendly environment," 
said Craig Downing, vice 
president of product 
management at ACC- 
PAC International Inc., 
which sells business 
applications for Linux, 
Windows and other 
operating systems. 

It wasn't always like that. "Fifteen or 
so years ago, we were still writing our 
own printer drivers," he said. Then, in 
the early 1990s, Microsoft began creat- 
ing software libraries that made drivers 
for printers, keyboards, network cards 
and other devices available to ISVs free 
of charge. That completely changed the 
way ISVs worked, recalled Downing. 



Linux is '10 years 
behind' Microsoft but 
catching up. 

-Craig Downing, vice president 
of product management at 
ACCPAC International Inc. 



"Microsoft was saying, 
This is our problem to 
deal with, not yours.' 
And they were smart 
enough to see it was 
stupid to try and sell us 
this stuff. " 

In doing so, Mi- 
crosoft created the de 
facto standard for work- 
ing with ISVs, said 
Downing: Give the small 
stuff away, but get the 
developer to buy into 
your product strategy. 
Although the offerings 
are directly compara- 
ble, as Linux backers 
launch ISV programs 
today, they are in a 
sense simply catching up with Micro- 
soft, noted Downing. 

In the Linux world, drivers are gener- 
ally provided by the peripheral vendors. 
When you install Linux on a computer 
today, the keyboard will work [and] the 
mouse will work about 90 percent of the 
time, said Downing. "We are 10 years 
behind, but are catching up." 

-Jennifer deJong 
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EDITORIAL 

A Tale of Two Tigers 

It seemed only yesterday that the Java camp was mired 
in quicksand, while Microsoft's .NET platform took off 
at warp speed. 

But as we look back on the first half of 2004, the road 
from Redmond is filled with potholes: Windows "Long- 
horn," Visual Studio "Whidbey" and SQL Server 
"Yukon" all have been delayed, while the Java market 
has roared back with new updates and interesting 
initiatives. 

Take Sun, the standard-bearer (and copyright holder) 
of Java. While many questions remain about the viability 
of the company's business strategies, it's made a lot of 
waves with the second beta of Tiger. The update to the 
desktop Windows client, which used to be called Java 2 
Standard Edition 1.3, now has a new name — Java 2 Plat- 
form Standard Edition 5.0 — as well as a new user inter- 
face, better manageability and performance improve- 
ments, and some minor changes to the Java language. 
While these changes are evolutionary, not revolutionary, 
it's good to see that Java is continuing to evolve under 
Sun's stewardship. 

However, not all of the Java progress can be attributed 
to Sun. In fact, many of the most interesting Java trends 
of the past year, such as the rapid ascent of the Eclipse 
open-source tools platform, are in direct competition 
with Sun's own initiatives, in this case NetBeans. Despite 
Sun's continued snubbing of IBM's Eclipse Project, 
many of the most interesting announcements at Sun's 
own JavaOne conference involved the integration of 
developer tools with Eclipse (and not the newly 
revamped NetBeans). 

When it comes to tools, the Java community remains 
unfortunately fractured. 

And not just with tools. BEA's Beehive project, now 
affiliated with the Apache Software Foundation, and Pol- 
linate, now to be affiliated with Eclipse as well, are part of 
a bold initiative to develop a common approach toward 
service-oriented architectures. So far, there's nothing 
common about it — applications built using the Beehive 
framework can run only on BEA's Web Logic platform. Yet 
the approach remains promising. It will be interesting to 
see Sun's reaction and whether it will help, hinder or 
ignore BEA's initiative. 

The second Tiger is Mac OS X 10.4, previewed at 
Apple's World Wide Developers Conference. While the 
Mac remains a niche platform, it's an attractive program 
nonetheless, with sexy hardware (including a newly 
announced 30-inch flat-panel display), rich audio/video 
and animation, seamless 32/64-bit computing and a set 
of bundled applications and utilities that are far more 
intuitive and user-friendly than any other desktop oper- 
ating system. 

Tiger itself won't ship until the first half of next year, 
and its benefits — like those in Sun's Tiger — are clearly 
evolutionary, not revolutionary. While Mac OS X 10.4 
boasts 150-odd new features, none of them will be must- 
have reasons to inspire a migration from Linux, Unix or 
Windows. But then, when you look at Tiger (or Panther) 
running on Apple's latest hardware, it's hard not to be 
impressed — or seduced. 

One wonders if Microsoft's Longhorn will be as inspi- 
rational when it appears after its long delays. I 
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e have come a long way 
in making computers 
easier for humans. Even as 
they remain fiendishly com- 
plex at times, we have success- 
fully reached the point where 
more than half of the popula- 
tion uses computers on a regu- 
lar basis. Modern graphical 
user interfaces are much easi- 
er to learn and slightly more 
efficient to use than the green 
screens of yore. Web sites have 
mainly grown beyond the 
excesses of the bubble era: It's 
pretty rare to see a splash page 
these days, and gratuitous ani- 
mation is less prevalent than it 
used to be. 

This said, much remains to 
be done to reach acceptable 
levels of usability. Users typical- 
ly fail a third of the time when 
they try to use new features or 
visit new Web sites. Average 
usability metrics are currently 
at a level of two sigma — 
100,000 times worse than the 
frequently stated quality goal of 
six sigma. From a quality engi- 
neering perspective, usability is 
so horrendous that no physical 
product with the same metrics 
would ever make it off the fac- 
tory floor. 

Why the poor usability? I see 
six common fallacies: 

Fallacy 1: If it's a Web page, 
an intranet page or a GUI, it 
must be easy. False. The only 
thing that's easy is to identify 
the blue underlined words 
where you can click. But which 
one to click is anybody's guess. 

Fallacy 2: This interface 
looks easy enough to me, so it 
should be easy to users. False. 
If you worked on the project, 
you know too much about what 
the system can do and where to 
find each feature. In fact, if you 
work in IT, you know too much. 
You can't wipe your brain and 
pretend to be an average user 
who is seeing the interface for 
the first time. That's why we 
need user testing. 

Fallacy 3: We already talk 
to users, so we know what they 
need. False. What people say 
and what they do are two dif- 
ferent things. Stated require- 
ments never match users' actu- 
al needs. This one issue is the 
leading cause of cost overruns 
on software development pro- 
jects and ample reason to justi- 
fy spending time on user 
research to watch what people 
actually do. 
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Fallacy 4: I have hired 
competent interface designers: 
They know what they are 
doing, so we don't need user 
testing. False. This belief is 
equivalent to deluding yourself 
that you have hired good 
enough programmers that you 
don't need any debugging. 
Even the best de- 
signer can't design 
an interface without 
flaws. User testing 
must become just as 
standard as software 
testing. 

Fallacy 5: Our 
schedules are too 
compressed to allow 
extra time for usabil- 
ity engineering activ- 
ities. False. It only takes a few 
days to run a simple user test, 
and the resulting time is gained 
many times over in reduced 
change requests and mainte- 
nance. Often, development 
teams will spend more time in 
meetings arguing over what 
users want instead of spending 
a small amount of time to find 
the answer empirically. 

Fallacy 6: The previous 
points don't matter: We can't 
afford usability in any case. 
False. The productivity gains 
from better user interfaces are 
worth many times more to the 
company than the modest cost 
of usability. When you launch a 
new intranet application, you 
can typically cut training costs 
in half through usability. 

In recent usability testing of 
several intranets, we found that 
employees spent almost twice 
as much time performing com- 
mon tasks on intranets with 
poor usability as they did on 
intranets with high usability. 

Luckily, it's very easy to do 
usability. It can be integrated 
into any development process. 
Even though there are quite a 
number of advanced usability 
techniques, the most basic 
method is user testing, which 
anybody can learn in a few 
days. You don't need a fancy 
lab with one-way mirrors and a 
bunch of cameras. 

In fact, we do most of our 
studies in offices or confer- 
ence rooms with a laptop and 
digital recording of the user's 
actions directly to the hard 
disk. For a simple user test, 
it's usually enough to test five 
users to generate a long list 
of improvements to the de- 




sign. It can hardly be easier. 

The past 30 years of experi- 
ence with usability engineer- 
ing have shown that quick 
qualitative tests are the best 
way of improving the quality 
of user interface designs. 
More expensive quantitative 
studies have their role in met- 
rics-driven organi- 
zations that want 
to move to higher 
maturity levels and 
manage usability 
strategically beyond 
the individual pro- 
jects, but for every- 
day needs, quick 
and cheap tests 
rule. 

It has also be- 
come clear that usability needs 
to be engaged from the very 
beginning of a project to col- 
lect early data about user 
needs. Furthermore, we know 
that iterative design is the best 
way to drive up the quality 
of user interfaces, through the 
use of rapid prototyping and 
many rounds of quick user 
testing. 

The key lesson is to inte- 
grate usability tightly with the 
development team and ensure 
that user research is conduct- 
ed at multiple checkpoints, 
from requirements, through 
design and prototyping, to 
final implementation. Polish- 
ing off the fit and finish of the 
final user interface is an 
important role of usability, but 
it's even more important to 
test the feature set and the 
architecture of the interaction 
design. Doing so requires 
more use of quick prototypes 
and more early testing than 
are currently used in most 
companies. 

Until recently, I was rather 
smug in my awareness that 
usability methods were well 
established and proven over 
many years. The main remain- 
ing challenge was to get compa- 
nies to employ these simple 
methods more widely. Recent 
developments have shattered 
this comforting feeling. 

OFFSHORING AND USABILITY 

Offshoring raises new issues 
for usability, because the exist- 
ing methods rely so strongly 
on quick iteration and a tight 
integration with all the differ- 
ent roles in the development 
team. When most of develop- 
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ment moves offshore, these 
close connections break. 

The current offshore pro- 
viders have close to zero com- 
petency in usability. They are 
good at many other things, but 
not usability. We are suffering 
a setback to the mainframe era 
in terms of integration of 
usability skills with the devel- 
opment team. 

I see two possible solutions: 
One is to build up usability 
skills offshore, and the other is 
to find better ways of handing 
off usability knowledge with- 
out a tight integration between 
usability and development. 
Neither solution will follow 
easily from the methods and 
insights we have established 
over the past 30 years. 

In fact, existing experience 
tells us that both approaches 
are doomed to failure: You 
can't do user research without 
being on-site with the users, 
and you can't translate usabili- 
ty findings into good imple- 
mentations without iterative 
design and frequent commu- 
nication between usability and 
the rest of the team. 

Just because we seem to be 
doomed has never stopped us 
in the past. We will have to 
find new methods and ways 
of overcoming the offshore 
challenge to the quality of the 
user experience. 

Unfortunately, very few 
people are working on this 
problem. Most prefer to pre- 
tend that it doesn't exist. I 

Jakob Nielsen is principal of 
Nielsen Norman Group, and is the 
author of "Designing Web Usabil- 
ity: The Practice of Simplicity. " 
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WELCH'S GRIPE 

In Andrew Binstock's column 
"The Decline and Fall of 
the U.S." [June 15, page 33, 
or at www.sdtimes.com/cols 
/integrationwatch_104.htm], he 
quotes Jack Welch. It's no won- 
der why Jack Welch is the for- 
mer CEO of GE. I wouldn't 
have that guy manage my kid's 
lemonade stand. 
David Buchwald 

Mr. Binstock's June 15 column 
left me confused. The first 
paragraph ends, "There was a 
remarkable unanimity of opin- 
ion on the topic," referring to 
outsourcing. Predictably, "Neu- 
tron Jack" Welch was a big fan, 
as were Gerstner and Mulcahy 
However, as I read the column, 
Michael Porter is hardly a fan, 
claiming "the more a company 
outsources, the less competitive 
advantage it enjoys." Hardly 
sounds unanimous to me. 
David Strip 

In your June 15 edition, 
Andrew Binstock writes on 
population trends and eco- 
nomics. Did he do any re- 
search for this article? I'm no 
expert on population issues, 
but I am capable of looking 
things up in the likely places. 
It doesn't look like your colum- 
nist does even that. A Google 
search revealed that China and 
India, which he said will 
replace the United States as 
the global center of commerce, 
has the same aging problem 
that we have here. 
James Robertson 



TIME-RELEASED TABLET 

Larry O'Brien is generally on 
the ball, but he displays a sur- 
prisingly short memory in his 
column "Microsoft's Tablet 
Works Right Away" [June 15, 
page 35, or at www.sdtimes 
.com/cols/winwatch_104.htm] . 

In that column, he claims 
that Microsoft created the 
"usable, powerful and essen- 
tially bug-free" Tablet PC "on 
the first try." Not only is it 
more properly their third or 
fourth major try at building a 
useful pen-based platform, but 
his claim diminishes the hun- 
dreds of person-years of effort 
that Microsoft has invested, 
culminating in the current 
product. 

I worked closely alongside 
Microsoft on early pen-based 
efforts from 1990-1995. Near- 
ly all of the Tablet PC's fea- 
tures identified by O'Brien, 
including high-level SDK 
objects and the high-perfor- 
mance ink collection, were the 
result of feedback gathered 10 
years ago, and many of them 
have appeared, in whole or in 
part, in Microsoft pen-based 
efforts predating the Tablet 
PC (e.g., Windows for Pen 
Computing, WinPad, Win- 
dows CE). 

Like Moore's Law and Met- 

WHAT DO YOU THINK? 



calfe's Law, the Law of Three 
Microsoft Releases has not 
been repealed, despite his 
claim otherwise. 
Randy Parker 

NO MORE HANG-UPS 

Allen Holub's column ["Good 
Tech Support Yields Better 
Software," June 15, page 37, 
or at www.sdtimes.com/cols 
/javawatch_104.htm] sheds 
light on a very important fact. 

When sales are down, com- 
pany executives look to make 
many changes to tackle the 
low sales issue. Do they ever 
pay any attention to phone 
queues who keep people wait- 
ing for more than a few min- 
utes? I am so tired of hearing a 
recording say "Your call is 
important to us" over and over 
again. And, as Mr. Holub illus- 
trated, when you get angry 
enough to hang up or are 
disconnected, you are not 
detected. The company never 
follows up on your issue, 
which more often than not will 
lead you to take your business 
elsewhere. 

This seems to be one of the 
most simple problems for a 
company to fix. I hope some 
CEOs read this story, and do 
something about this problem. 

Anthony DeLuca 
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What Are the Most Important 
Characteristics of a Web Services 

Development Environment? 
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Not surprisingly, given the nature of interoperability inherent to Web 
services, support for standards was of primary concern to develop- 
ers when selecting a development environment for Web services. 
That's according to the Web Services Development Survey 2004, 
published by Evans Data Corp. in June. 

The importance of remaining characteristics was somewhat 
evenly spread, with specific Web- and application-server integration 
taking the second spot, followed by debugging and test features, 
usable GUI and support for specifications published by the Web Ser- 
vices Interoperability Organization (WS-I). 

Interestingly, nearly as many respondents judged wizards and 
other visual aids just as valuable as open-source support and plug- 
gability of toolkits, indicative that ease of use is as important as 
openness and extensibility. 
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'Til the Fat Client Sings 



Web-based deployment comes in 
and out of favor but often founders 
because of the conflation of HTML- 
using, browser-based and Web-deploy- 
ment concerns. Additionally, many dis- 
cussions of "fat client," Web-deployed 
software get derailed by concerns about 
server-based "rental" fees or server-side 
resource consumption. 

Joel Spolsky, the insightful proprietor 
of Fog Creek Software, dropped a cher- 
ry bomb in this particular anthill by 
writing "How Microsoft Lost the API 
War" (www.joelonsoftware.com/articles 
/APIWar.html), in which he concludes 
that "the new winners in the application 
development marketplace will be the 
people who can make HTML sing." In 
other words, he says that only the 
thinnest-client model is viable. 

Spolsky does a good job differentiat- 
ing two competing camps within 
Microsoft: one dedicated to backward 
compatibility (he labels this the "Ray- 
mond Chen" camp, after the Microsoft 
developer who diligently blogs about the 
issue), and another dedicated to further- 
ing the use of every conceivable combi- 
nation of Microsoft technologies (the 
"MSDN Magazine" camp). 

Naturally, the Microsoft argument is 
that these two camps are totally cooper- 



ative, that users might want to build 
apps that rely upon integrating BizTalk 
with Flight Simulator via SharePoint. 
Nevertheless, Spolsky's construction 
identifies a real tension that exists, not 
just at Microsoft, but at any company 
evolving complex software. 

However, its putting the cart before 
the horse to claim that lack of 
backward compatibility can 
drive the choice of thick or 
thin clients. The choice of 
client "thickness" is based on 
the UI and deployment. 

Although the UI often 
drives the choice, the deploy- 
ment model, which consists 
of updating directories on the 
production server and having 
them load in clients over the 
network, is a more compelling point. 
You can't do everything you want with a 
hyperlink and a stylesheet, but you can 
prevent nightmares by having a single 
source for critical binaries. 

"Web applications don't require Win- 
dows," says Spolsky, which is true only in 
two very specific senses: Web applica- 
tions don't require UI APIs, and Web 
applications don't necessarily need to use 
APIs developed in Redmond. But Web 
apps do need database access, network- 



ing and threading; initialization and con- 
figuration customization; error handling 
and recovery; logging; file system access; 
e-mail; messaging; globalization; security 
and encryption... 

Not every app needs all of these fea- 
tures. But for a given number of non- 
trivial capabilities, API complexity is lin- 
ear, if not constant. Even if 
you believe that every Java 
API is superior to every .NET 
API, that every Python 
library is more powerful than 
every C library, you still need 
* essentially the same order of 
APIs to fulfill an application's 
^m\ i worth of use cases. 

This isn't saying that one 
shouldn't know about and 
use the strengths of differ- 
ent languages and libraries: If you're 
doing hypermedia, you might use a 
Web browser, or an HTML widget on 
a thick-client's form, or spend a gazil- 
lion hours programming your own. All 
of those count as one API. 

Similarly, for parsing XML documents, 
you can choose between a platform- 
specific API (such as .NET's XPath- 
Document), a standards-conformant API 
(DOM), or roll your own with regular 
expressions. Does a standards-based 




Larry 
O'Brien 



approach have advantages? Absolutely. 
Even if you don't have a starry-eyed belief 
in the quality and good faith of standards, 
it's nice to have knowledge that's portable. 
But an API is an API, whether it comes 
from Redmond, SourceForge or the Unit- 
ed Nations. 

Certainly the market has spoken in 
favor of improving interoperability, and 
you could write an essay called 
"Microsoft Lost the API Wars" based 
on the premise that where the market 
used to accept Redmond-based APIs 
fairly readily, the phrase "lock in" is 
now quick to the lips. Spolsky comes 
close when he concludes that moving to 
ASP.NET would bog him down without 
return on his investment. 

I'm not going to advocate embracing 
Microsoft lock-in or chasing its latest 
APIs, but you can't get away from external 
dependencies by writing HTML. 

Web-based deployment of fat clients 
that can work in an "occasionally connect- 
ed" manner goes a long way toward con- 
trolling brittleness. The cost is potentially 
hefty downloads of the associated binary 
dependencies, including everything from 
the .NET runtime to specific assemblies. 
Compared with the married-to-the-Web 
choice of HTML-based applications, it 
seems an easy decision. I 

Larry O'Brien is a technology consultant 
and analyst, and the founding editor of 
Software Development Magazine. 
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Blogs Providing Effective Team Integration 



As more than one pundit has ob- 
served, the Web gives every idiot 
a megaphone. If you consider the 
extremist screeds, bigoted claptrap and 
misbegotten nonsense posted on the 
Web, you undoubtedly suffer from the 
disquieting feeling that there are far 
more members of the flat-earth society 
than you ever believed. To this load of 
pabulum, we can certainly add blogs (or, 
if you prefer the formal term, Web logs), 
which in large part consist of self-indul- 
gent narratives of trivial quotidian activ- 
ities written by people with plenty of 
time on their hands. 

Not all blogs fall to the level of the 
purely puerile, although many do. Pro- 
grammers and technologists, for exam- 
ple, form a discernible group of bloggers 
who use the medium to communicate 
things of value to their peers. 

In a move that appears to cut across 
traditional corporate culture, Microsoft 
has encouraged its developers to blog 
about what they're working on (see 
msdn.microsoft.com/vcsharp/team/blogs, 
for one). These blogs are surprisingly can- 
did and informative. Faults in Windows' 
design as well as tips for getting around 
them are frequently posted. Outside of 
Microsoft, SD Times columnist Larry 
O'Brien has an interesting blog at 



www.knowing.net, and Miguel de Icaza's 
log is a must-read for the .NET crowd. (A 
separate cabal of Java bloggers exists as 
well, although in my opinion, it's some- 
what smaller and less tightly dedicated to 
the technology.) 

Programmers represent one of the 
most important and dynamic communi- 
ties served by blogs, because 
programmers recognize the 
value of sharing their break- 
throughs and typically don't 
want to pollute their technical 
information with off-topic dri- 
vel. (Before I move on to my 
next point, I should point out 
that blogs of the Iraq war 
were particularly fascinating, 
especially during the early 
campaign, when you could 
read posts from people in Iraq as well as 
from soldiers closing in on them.) 

To keep abreast of the blogs you care 
about, the RSS feed mechanism has 
emerged as the technology of choice. 
RSS, which has been an acronym for 
three different appellations, basically is 
an XML format that represents content 
from a blog (among other things). By use 
of RSS and an aggregator, blogs can be 
checked for new posts, which are then 
consolidated and presented to you. This 
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summary saves your visiting each blog 
individually to see what has changed. 

Now, take these two technologies — 
blogs and RSS — and think of how an IT 
site could use them internally. One clever 
way, which has begun to appear for sys- 
tem managers, is for sys admins to post 
what they've done during a given day, as 
well as the problems they 
encountered and the solutions 
they designed. 

This blogging has several 
immediate benefits: A man- 
ager using RSS can find out 
hat the staff is up to without 
having to wait for status 
meetings or for time sheets 
SM a to be filled out. For the 
■^Bkvl admins themselves, it creates 
an unstructured but search- 
able knowledge base of system issues and 
fixes. It combines both the problem- 
solving and the system history into one 
document that is traceable back to the 
dates and the persons involved. What 
could be better? 

Now consider applying this model to 
software development. By use of blogs 
posted on the IT department's intranet, 
managers can measure progress on a pro- 
ject and developers can share the nuggets 
of wisdom that they've come up with. The 




latter is especially useful when it delves 
into problems that are likely to confront 
other members of the team — such as 
using the new features in Java 1.5 or C# 
2.0. Knowledge of this kind, especially, 
should be shared and posted. In addition, 
because blogs provide means for posting 
comments, improvements to proposed 
workarounds can be contributed by read- 
ers, including peers and managers. 

Much of development work today in- 
volves two types of activities: 1) announc- 
ing the work you've done for purposes of 
tracking progress and avoiding miscom- 
munications and 2) logging what you've 
done as part of a historical record that can 
be reviewed by people who come after 
you. In the past, the latter step was fre- 
quently forgotten or the material was 
buried in untold comments in source 
code. Both activities are well served by 
the blogging metaphor, which also adds 
greater searchability and, of course, the 
RSS feed mechanism. Expect to see more 
blogs at your site — among developers, sys 
admins and system managers. Because 
business activities by other employees 
involve similar challenges and solutions, I 
expect that blogs will become a common 
staple of communications among your 
users as well. At which point, your depart- 
ment will start supporting blogs as well as 
using them internally. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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Java Still Struggles With Persistence 



When it comes to persistence — stor- 
ing an object in some place external 
to your program, ideally in a database — 
there's a strong need for simplicity. 

The Holy Grail of persistence is 
transparent object storage. I just want to 
put some object in the persistent store 
and pull it out again later, as if I were 
storing the object in a local data struc- 
ture like a hash table. 

I don't want to know anything about 
databases, XML files or whatever physi- 
cal storage is used under the covers. 
Achieving this level of simplicity is very 
difficult. Sometimes I need to use com- 
plex criteria to find a particular object or 
group of objects, but I want the complex- 
ity out of the way when it's not relevant. 

You can find proof of the difficulty of 
building a simple-to-use but powerful 
persistence system by looking at all the 
bad implementation floating around. 

Roll-your-own systems built on 
JDBC are too complex, and require spe- 
cialized knowledge of databases. Object 
databases looked promising for a while, 
but they were never trusted enough to 
be commonly used or sufficiently stan- 
dardized, and forced you to learn com- 
plex new query languages. 

I don't want to open the Enterprise 
JavaBeans can of worms in this column, 



but unfortunately, many misguided peo- 
ple used EJB to implement persistence — 
at a huge cost in up-front development 
time, long-term maintenance problems 
and runtime performance. 

An entity bean is not the same thing 
as a persistent object. EJB-based O/R- 
mapping systems such as Thought Inc.'s 
CocoBase cover the zits with 
a thin layer of makeup, but 
they don't solve the problems 
inherent in the underlying 
EJB system. 

Java's other persistence 
solutions have also been far 
from ideal. JDBC doesn't get 
along very well with the notion 
of objects, it doesn't provide 
enough in the way of APIs to 
let you write in a database- 
independent way, and at the same time 
doesn't do many common database-relat- 
ed tasks (like transactions) very well. 

The various XML APIs don't talk to 
relational databases, and introducing an 
XML-to-database translation layer adds 
too much inefficiency. Java Data Objects 
is a step in the right direction, but JDO 
is way too complicated for my taste, and 
requires a post-processor that manipu- 
lates your bytecode to make an object 
persistable — something that's bound to 




cause maintenance problems and also 
ties your code to a specific vendor. 

In the face of all this, I was pleasant- 
ly surprised when I looked at the Hiber- 
nate persistence framework a few weeks 
ago (hibernate.bluemars.net). 

Currently in release 2.1.3, Hibernate 
is a mature open-source product that's 
pretty well conceived and 
I executed. It comes close to 

r achieving my goal of a simple 
but powerful persistence lay- 
er, though some of the flaws 
of open source are there, too: 
Hibernates documentation is 
marginal, installation is not 
painless, and so on. You can 
Tj(; m i ,( buy support from JBoss if you 
!"■ j ■ .-/J j ■ need it. 

The main strength of 
Hibernate is its ease of use. Object 
persistence is accomplished using run- 
time analysis (via the introspection 
APIs), so there are no special base 
classes to extend, no post-processor to 
run, no hassle. You just open an object 
that represents the persistent store, 
and then pass it the object that you 
want to store. 

Hibernate works out of the box with 
all of the major databases. It even gen- 
erates the SQL for you if you need it to. 



As is the case with all the do-every- 
thing-for-you systems, the price you pay 
for all this power is a less-than-optimal 
use of the database itself. The system is 
easily extensible, however. You can get 
control of virtually every aspect of the 
database-access process via an XML 
configuration file or a small number of 
interfaces that you can implement to 
customize the system. 

You do not have to use machine-gen- 
erated SQL, or accept the simple field- 
name-is-the-column-name default. The 
main issue is that you don't have to do all 
this stuff, however. The default system 
works well enough for a prototype (and 
perhaps for the production application) 
without any customization. 

As a designer, my main complaint 
about Hibernate is its use of the get/set 
idiom to tag the fields that need to be 
stored. Fortunately, Hibernate uses 
introspection rather than Java interfaces, 
so you can (and in fact, should) make the 
getters and setters private; I strongly 
recommend that you adopt a style guide 
that requires them to be private. 

In general, though it has its warts, I 
think that Hibernate is the most viable 
of the Java persistence systems out 
there, better than all of the more com- 
plicated (and often pricey) alternatives. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holuh.com. 
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May 2004, 943 participants 

T hird A nnual J ava Study 

N ovember 2003, 949 participants 

Web Hosting Study 

October 2003, 442 participants 

Business Integration Study 

October 2003, 433 participants 



N ow available online at 
www.bzresearch.com 
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See Nitix Run 



Industry Watch 
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One of our chief responsibilities as 
the newspaper of record for the 
software development industry is to cut 
through the marketing spiel of tools and 
platform vendors to give you, our read- 
ers, as objective a look as possible at 
what's happening in the industry. 

Recently, though, we learned of a 
campaign so fun that we feel com- 
pelled to mention it here. 
Oh, and the technology 
underlying the campaign is 
pretty cool, too. 

The company is Net Inte- 
gration Technologies Inc., 
and since its incorporation in 
1999 it has been developing 
and selling Nitix, a Linux ker- 
nel-based operating system 
that sits in direct competition 
to Microsoft in the server 
market where small and midsized busi- 
nesses shop. 

Now, however, a new version of Nitix 
is coming out with enhanced autonomic 
computing features for self-installation 
and self-healing, as well as with "Uni- 
conf," which is a conduit through which 
a Nitix system can configure itself and 
also reach out to other systems to con- 
figure them. This is the story told by 
Ozzy Papic, the company's founder and 
chief executive officer. 

"We're going for the next stage in the 
evolution of operating systems," Papic 
said. "Everything's getting way too com- 
plex. To run a little server room, you 
need to know rocket science." 

The company's goal, Papic said, is to 
create a replacement for Microsoft's 
server operating systems but not have 
users see any difference as they go 
about doing their jobs. Papic said he 
can envision a framework whereby 
Nitix becomes a glue to pull an enter- 
prise's disparate systems together, with 
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the autonomic features flowin 
into other parts of the organi- 
zation. The unified configura- 
tion feature for the first time 
takes Nitix from a self-con- 
tained operating system and 
gives it multiserver capability, 
Papic said. 

"You can deploy any net- 
work on Nitix now, 
and it's more trans- 
parent than Micro- 
soft," Papic added. 
"And, Nitix-powered 
servers can be 
plugged into a Win- 
dows environment. 
That saves a lot of 
money on the cost of 
the solution. The costs to 
run, install and maintain the 
system are orders of magnitude less." 
Nitix, he claimed, is 20MB and is func- 
tionally equivalent to Microsoft Small 
Business Server in that it, too, features 
a SQL engine, does virus scanning and 
Web caching and has a firewall and 
e-mail, but it's one-half of 1 percent of 
the size. And, he said, Nitix does more 
in the areas of disaster recovery and in 
virtual private networks, while never 
having been penetrated by or affected 
by any viruses, worms or other mali- 
cious attacks. 

Net Integration Technologies had a 
big problem, though. As a small venture- 
funded company based in Canada, it 
struggled with getting people to under- 
stand what it was doing because it lacked 
the massive marketing budget that 
Microsoft has. 

So a creative team that Papic called 
"very brave" came up with a concept, 
and the company's advertising agency 
fleshed it out. 

It's called, "Sorry Bill." 




Read the story at www.sorrybill.com. 



Written and drawn in the style of an 
elementary-school primer, "Sorry Bill" 
tells the story of a little boy with glasses 
named Bill who tries to impress a young 
girl with his wooden go-cart, but it 
keeps crashing unexpectedly and 
breaking down. Meanwhile, another 
boy drives up in a sleek cart and whisks 
the girl away while the young boy with 
glasses is left trying to effect repairs. 
Following the cute story are a few 
pages of text explaining what Nitix is 
and what it can do. 

The company decided on the use of 
the primer approach to show "that it's as 
simple as child's play," Papic said, fur- 
ther boasting that a 500-person compa- 
ny can deploy a complete back-office 
infrastructure in half an hour. 

Papic said the response to the cam- 
paign has been very good but concedes 
that Microsoft "owns" the market. At 
least now, companies looking to make a 
server platform buy can get a different 
read on the matter. An easy read. I 

David Rubinstein is editor of SD Times. 
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Data management software vendor Versant Corp. has announced it will acquire 
the JDO Genie object-relational mapping tool and its customers from JD0 
Genie Ltd. of South Africa. Versant, which had offered Java Data Objects prod- 
ucts through a partnership, said customer response showed the company need- 
ed its own JDO solution. JDO Genie works with IBM's DB2, Microsoft's SQL Serv- 
er, MySQL and Oracle, among other databases . . . XML-Global Technologies 
Inc. has signed a letter of intent to acquire XFormity Inc. XML-Global, which sold 
most of its assets to Xenos Group Inc. last November, had been looking for a 
company to acquire; XFormity offers business-intelligence software. The deal will 
result in a change in a majority of the XML-Global board of directors and execu- 
tive management. 

EARNINGS: Business integration software vendor TIBCO Software Inc. 

reported revenue of US$81.2 million for the second quarter ended May 30. 
Net GAAP income for the quarter was $9.6 million, or 5 cents per share 
. . . PalmSource Inc., provider of the Palm operating system, reported rev- 
enue of US$73.1 million for fiscal-year 2004 ended May 28, down $300,000 from 



2003. The company posted a net loss for the year of $15.2 million, or $1.40 per 
share, compared with a net loss of $21.8 million for the prior year. On a non- 
GAAP basis that excludes some costs of spinning off from palmOne Inc., the 
company showed a net loss of $600,000, or 5 cents per share. Non-GAAP 
income for the year was $1.2 million, compared with a non-GAAP net loss of $11.7 
million for the prior year. Meanwhile, hardware vendor palmOne reported rev- 
enue of $267.3 million for the fourth quarter ended May 28, an increase of 23 
percent from the $217.1 million reported during the comparable quarter a year 
ago. Net income was $13.3 million, or 27 cents per share, compared with a net 
loss of $15 million a year ago . . . Embedded software development tools ven- 
dor Green Hills Software Inc., a privately held company, claimed record rev- 
enue and income for the year ended Dec. 31. The company said its revenue was 
US$51.2 million and operating income was $11.4 million. Green Hills claims the 
figures are in accordance with GAAP principles and have been audited by Ernst 
& Young. Privately held companies are not required to file earnings and income 
statements as publicly traded companies are; therefore, the reporting is not 
subject to regulatory agency scrutiny. I 



CALENDAR OF EVENT* 



Rational User July 18-22 

Conference 

Grapevine, Texas 
IBM CORP. 

www-306.ibm.com/software/rational 
/events/ruc2004 

Black Hat USA 2004 July 24-29 
Las Vegas 
BLACK HAT INC. 
www.blackhat.com 

VSLive New York July 26-29 

New York 

FAWCETTE TECHNICAL PUBLICATIONS INC. 

www.ftponline.com/conferences 

/vslive/2004/ny 

Open Source July 26-30 

Convention 

Portland, Ore. 

O'REILLY MEDIA INC. 

conferences.oreillynet.com/os2004 

SCO Forum 

Las Vegas 

THE SCO GROUP INC. 

www.sco.com/2004forum 



Aug. 1-3 



LinuxWorld 
Conference & Expo 

San Francisco 

IDG WORLD EXPO CORP. 

www.linuxworldexpo.com 



Aug. 2-5 



SIGGRAPH 

Los Angeles 

ACM SIGGRAPH 

www.siggraph.org/s2004 



Aug. 8-12 



HP World 
Conference & Expo 

Chicago 
INTEREX 
www.hpworld.com 



Aug. 16-20 



Embedded Software Aug. 17-19 
Development Conference 

San Jose 

BZ MEDIA LLC 

www.esdevcon.com 

FileMaker Aug. 29-Sept. 1 

Developer Conference 

Phoenix 

ADVISOR MEDIA INC. 

advisorevents.com/Event/CFF0408 

Intel Developer Sept. 7-9 

Forum 

San Francisco 

INTEL CORP. 

www.intel.com/idf/us/fall2004/systems 



Borland Conference 

San Jose 

BORLAND SOFTWARE CORP. 

info.borland.com/conf2004 



Sept. 11-15 



VSLive Orlando Sept. 11-15 

Orlando, Fla. 

FAWCETTE TECHNICAL PUBLICATIONS INC. 

www.ftponline.com/conferences 

/vslive/2004/or 



SunNetwork 

San Francisco 

SUN MICROSYSTEMS INC. 

www.sun.com/sncsf2004 



Sept. 14-16 



For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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MANAGE • DEBUG • TEST • DELIVER! 




_ affordable and feature-rich application testing, profiling, debug* 
and project management tools have been engineered from the ground up to deliver 
robust and unparalleled support for Windows® applications and are one of the first 
products of their kind with full .NET Framework support out of the box. Once you start 

using our tools, you are well on your way to building rock solid applications, in the 

shortest possible time, guaranteed! 
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Got Bottlenecks? 

Want to Improve the Performance of Your 

Applications? 

AClline is a ccmplEte industrial graife yrahler/dabugaer - engineered La help yw disc&vfir 
applicator bDlilif.-ie:ks 1 mestiDry leaks, fesaurce-Jiagging c&Je, kid i^esik] alprilhrrts in your 
software projtcls. BCH ON Ht C LIEN I AND MVEH £;UE! mm If a IdW aoluliu lor 
is-.-dleasior.al Wmdcr^aS sfe^lDKrii hat wanl to eliminate gu^sswaik during aeMElDCfnanl Kid 
deliver ru^k sal id programs wfieh tte SKdjec! is tamplele. Via. lis unrivaied rfiponing and lest 
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With TestComplete, 
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Each and Every Time! 
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TlriGtfnplfftfl ts AtftaniitaHA'a rr:tnpl^r^ application i- linn m flflterlmf wlamrinl 
tunttlcmrii Jin I and rftjpsii^ teling In nnc imj.j la li^i and lErtally iringmfed pack^p. 
TesfDwiplstB hr ngj tpstttiB0 Dtf rf tto Bqrk Ajjes by raring nn iBunfebltf wny in wfticn in ^\m 
im*-§piid amf predirtabia applications- bnflrnt.-.rti and wenr Ismry 1 
Whfllh&r yw build WindowsS pr W-nb vpftcafipns Ore* JTO attfri Lining TflsiCnraplBte. ymJ'll hi* 
qh n iq Iufh Every inr;: run nl: 2 key canJribution Id your DfflraU rfflVESppment elfprts. 
I -KomplelB will heap psfl itrpfflcte pn idttdulfe and on sra. Ihc tuam ajnlijfcnl.. -and IhE wrk 
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2200 E. Patrfcfc Lane Suite 
Lbs Vegas NV 89119 
Tel: (702} 891 9424 



TestComplete end our curnpflefe range 

of QuaJrty Assurance tools* 

us oiif/w at,- www, a utomatedQa.com 



Microsoft, Windows ond Yteum Stotfto .WET are 

effftw registered rradernoFfcs ortrectefTwrire of Microsoft Corporation In the United Stats and/cr oi hw countries, 



4} In a perfect world, all databases would be ci eared equal, Bui in reality, fr's a jungle out there. Different database platforms. Diverse 
operating systems. And increisinj; prcHur-L- to keep :ticm ail under control. Fortunately* therts an easy way 10 manage all ytmr data. With 
Embarcadeto's DfiArtisan, Rapid SQL, a=]d the Analyst Series, you'll handle moie data with (wei resources. Reduce errors, And instantly 
cxTcr.d ycuir expcrri.se across multiple database platforms. To learn more, p'.cmsc visit www.-cmba^cadcro-.cnir./crcxu-plaiifnnn/. 
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